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Abstract. Quantum satisfiability is a constraint satisfaction problem that generalizes classical 
boolean satisfiability. In the quantum fe-SAT problem, each constraint is specified by a fc-local 
projector and is satisfied by any state in its nuUspace. Bravyi showed that quantum 2-SAT can be 
solved efliciently on a classical computer and that quantum fc-SAT with fc > 4 is QMAi-complete 
[ I]. Quantum 3-SAT was known to be contained in QMAi [ ], but its computational hardness was 
unknown until now. We prove that quantum 3-SAT is QMAi-hard, and therefore complete for this 
complexity class. 



1. Introduction 

Satisfiability is a widely studied constraint satisfaction problem. In this problem one is given a 
list of constraints on n boolean variables and asked to determine if there is an n-bit string which 
satisfies each of them. When each constraint involves at most k variables this problem is called 
^-satisfiability, or fc-SAT. Although 2-SAT can be solved efficiently on a classical computer, 3-SAT 
is NP-complete. 

Bravyi introduced a quantum generalization of satisfiability [ ]. In the quantum fe-SAT problem 
the constraints act on an n-qubit Hilbert space and we are asked to determine if there is a state 
which satisfies all of them. Each constraint is specified by a fe-local^ projector and is satisfied by 
any state in its nullspace. 

Bravyi proved that quantum 2-SAT is in P, quantum fe-SAT is contained in QMAi for any 
constant fe, and quantum fe-SAT for fe > 4 is QMAi-complete. The computational complexity of 
quantum 3-SAT has been an open question. In this paper, we resolve this question by proving that 
quantum 3-SAT is QMAi-complete. 

Less is known about quantum fe-SAT than is known about its classical counterpart. Random 
instances of quantum fe-SAT have been studied by Laumann et. al. as a function of the clause 
density a [17, 16]. As in the classical case, it is conjectured that a satisfiability threshold ac(fe) 
exists, above which the probability that a random instance is satisfiable approaches zero as n — )• oo 
and below which this probability approaches one [ L 7] . Some bounds on this threshold value have 
been proven using a quantum version of the Lovasz local lemma [">] and by using graph-theoretic 
techniques [6] but only the case fc = 2 is fully understood [17, 11]. Other previous work has focused 
on quantum satisfiability with qudit variables of dimension d > 2 [20, 22, 8, 5] or in restricted 
geometries [20, 7]. 

Quantum satisfiability is relevant to the study of frustration-free Hamiltonians. A frustration- 
free Hamiltonian is a local Hamiltonian (a sum of fe-local Hermitian operators for some constant 
fe) with groundstates that minimize the energy of each local term individually. Such Hamiltonians 
naturally arise in the study of quantum error correction and play a central role in the field of 
Hamiltonian complexity, which touches upon condensed matter physics, quantum computation and 
computational complexity theory [ ' ]. We can view quantum fe-SAT as the problem where one is 
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asked to determine if a sum of A;-local projectors is frustration-free, that is to say, if its ground 
energy is zero. 

The computational complexity of quantum A;-SAT is naturally compared with that of the fc-Local 
Hamiltonian problem, which can be viewed as the quantum analogue of MAX fc-SAT. In this problem 
one is given a Hamiltonian which is a sum of /c-local operators, along with constants a, b such that 
a < b. One is asked to determine if the ground energy of the given Hamiltonian is less than a (yes 
instance) or greater than b (no instance), promised that one of these conditions holds. Note that, 
for yes instances of this problem, a ground state of the Hamiltonian need not have minimal energy 
for each A:-local term; such a system can be frustrated. Because of the possibility of frustration, the 
A;-Local Hamiltonian problem can be computationally more difficult than quantum /c-SAT. Indeed, 
the /c- local Hamiltonian problem is QMA-complete for k > 2 [ ]. On the other hand, our result 
that quantum 3-SAT is QMAi-complete shows that these problems are of comparable difficulty for 
k > 3 (putting aside the subtle differences between the definitions of QMA and QMAi). 

In the next Section, we provide the basic definitions, describe our results in more detail and give 
an overview of the remainder of the paper. 

2. Definitions and Overview 

We first define the complexity class QMA, or Quantum Merlin-Arthur. This class gets its name 
from a scenario involving Merlin and Arthur, who at the outset are both given an instance of a 
promise problem encoded as a bit-string X. Arthur wishes to know the correct answer to this 
problem (which is either yes or no) but his time and space resources are bounded as polynomial 
functions of \X\. Merlin has unbounded computational power and can easily obtain the correct 
answer. Merlin wants to convince Arthur the answer is "yes" , but Arthur doesn't trust Merlin, so 
he asks for proof. Merlin hands over an n-qubit quantum state \W) (called a witness) that Arthur 
uses to verify the claim in the following way. He adjoins some number Ua of ancilla qubits each in 
the state |0) to produce 

11^)10)®'^'" 

(the total number n + Ua of qubits in this state must be upper bounded by a polynomial in |^|), 
then applies a polynomial sized verification circuit Ux and then measures the first ancilla qubit in 
the computational basis. If the measurement outcome is 1, he accepts Merlin's claim that X is a 
yes instance. Arthur's acceptance probability given the state \ W) is therefore 

AP {Ux, \W)) = II (l®" ® |l)(l|(n+i) ® I^^""-!)) f/x|Ty)|0)®""||' . (2.1) 

For problems in the class QMA, if Merlin is being truthful he can convince Arthur with probability 
at least |. On the other hand, if Merlin is lying (i.e., the answer is actually "no") then he can only 
fool Arthur with probability at most |. 

Definition 1 (QMA). A promise problem Lyes ULno C {0, 1}* is contained in QMA if and only if 
there exists a uniform polynomial-size quantum circuit family Ux such that 

If X G Lyes there exists a state \ W) such that AP {Ux, \ W)) > | (completeness). 

If X £ Lno then AP {Ux,\W)) < I for any state \ W) (soundness). 

As indicated above, the first property is called completeness and the second property soundness. 
Here we have defined QMA with constant completeness | and soundness |. Kitaev showed that 
these parameters can be amplified: we obtain an equivalent definition with soundness 2~^^^^^'^^ and 
completeness 1 — 2~^^\'^\°'^ for any constant a [ ] (see also [18, 23]). 

QMAi is defined in a similar way to QMA with two modifications. The first is "perfect" com- 
pleteness - for X £ Lyes, Merlin can convince Arthur with probability exactly equal to 1. The 
second difference is that Arthur's verification circuit must consist of a sequence of gates from a 
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fixed universal gate set Q. The definition of QMAi is not known to be independent of the gate set 
used. In this paper we use the standard choice 

g = {H,T, CNOT}, (2.2) 

where 

« = T={1 i 1. CNOT 

Definition 2 (QMAi). A promise problem Lyes U Lno C {0, 1}* is contained in QMAi if and only 
if there exists a uniform polynomial-size quantum circuit family Ux over the gate set G such that 

If X £ Lyes there exists a state \ W) such that AP {Ux, \ W)) = 1 (perfect completeness). 

If X G Lno then AP {Ux,\W)) < I for any state \ W) (soundness). 

Just as with QMA, the soundness of a QMAi verification procedure (taken to be | in the above) 
can be amplified so that it is very close to zero [' !]. 

Note that we could modify the definition of QMAi so that Arthur's verification procedure may 
use intermediate measurements in the computational basis as well as operations conditioned on 
these measurement outcomes. However, expanding the set of allowed verification protocols in this 
way we obtain an equivalent definition of QMAi. To see this, note that the controlled version of any 
unitary written as a product of gates from G can also be written as a product of gates from Q. Given 
a verification procedure which has some intermediate measurements we can use controlled unitaries 
in place of all conditional operations. This is the standard trick for deferring measurements until 
the end of an algorithm; in this case we need not ever measure any of the qubits except the ancilla 
which gives the output of the computation. 

We think of QMAi as being very similar to QMA, although the precise relationship between these 
two classes has yet to be determined. One might expect that QMA=QMAi since the analogous 
classical complexity classes MA and MAi are known to be equal [25]. This is an interesting open 
question in quantum complexity theory but we do not explore it further here (see [2, 12, 1-5] for 
recent developments). For us, the one-sided error in QMAi is primarily an annoyance that prevents 
the use of standard techniques such as converting between different universal gate sets. 

Let us now turn our attention to quantum 3-SAT. In this problem we are given a Hamiltonian 



that is a sum of 3-local projectors Ilj acting on an n-qubit Hilbert space. We are promised that 
either H has ground state energy zero, or else its ground state energy is greater than a constant 
(which we take without loss of generality to be 1) and we are asked to decide which is the case. 

Note that the matrix elements of a projector Hi in an instance of quantum 3-SAT cannot be 
specified as arbitrary complex numbers with unlimited precision. In our definition of quantum 3- 
SAT we must constrain the set of allowed projectors in some way. One possible choice would be to 
consider projectors where each matrix element is given to some number of decimal places, but this 
choice is not well suited to the one-sided error setting we are working in. In particular, it is not clear 
whether quantum 3-SAT, defined in this way, is contained in QMAi (although it is contained in 
QMA). On the other hand, if instead we consider projectors where each matrix element is expressed 
as a rational number with denominator 2^ (for some fixed integer s) then the problem is contained in 
QMAi. More generally, let us consider defining quantum 3-SAT with some set of allowed projectors 
v. Bravyi proved that quantum 3-SAT is contained in QMAi as long as V is chosen to satisfy the 
following condition: there is an efficient algorithm which can be used to measure the eigenvalue of a 
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projector 11 € 7^ in a given state using the gate set Q [4, 1]. Of course, since Q is universal, such 
a measurement can always be approximated using gates from this set, but here we require an exact 
measurement because of the one-sided error. We discuss this issue in more detail in Appendix A, 
but we mention this here so the reader is aware of the subtlety. The situation is further complicated 
by the fact that this technical point was treated incorrectly in reference [ i] due to an error in the 
proof of Lemma 5 [1]. 

In this work we define quantum 3-SAT with a restricted set of projectors V given below. While 
quantum 3-SAT remains in QMAi for larger classes of projectors, restricting to a smaller set makes 
our QMAi-hardness result stronger. The specific set V that we use arises from technical consider- 
ations. 

Definition 3. Let V be the set of 3-local projectors 11 which satisfy one of the following two 
conditions: 

1 . Every matrix element of H in the computational basis has the form 

^{a + ih + V2c + iV2d^ (2.3) 

for a, b,c,d£ Z. 

2. There is a 3-qubit unitary U with matrix elements of the form (2.3) (in the computational 
basis) such that UHW is equal to 

(^y|iooo) - yfiooi)^ (^/i^oooi - vl^°°^') 

on 3 of the qubits tensored with the identity on the remaining qubits. 

We define quantum 3-SAT with projectors from V. 

Definition 4 (Quantum 3-SAT). Given a collection {Hi : i = 1, . . . ,r} C V of 3-local projectors 
acting on n qubits, we are asked to decide if they correspond to a yes instance or a no instance 
(promised that one is the case), where 

Yes: There exists an n-qubit state \^) satisfying Ilil'^) = for alH = 1, . . . , r. 

No: J2Mni\iP) > 1 for all 

With the definitions given above, we prove that quantum 3-SAT is QMAi-complete. In Appendix 
A we show (following Bravyi [4, 1]) that quantum 3-SAT is contained in QMAi. Our main result in 
this paper is QMAi-hardness of quantum 3-SAT. To prove this, we exhibit an efficiently computable 
mapping from a i^-gate, (n + na)-qubit verification circuit that implements a unitary Ux to a 
Hamiltonian 

i 

which is a sum of O (ria + g) 3-local projectors Tii,x G V acting on G(n + na + g) qubits. Moreover, 
we prove 

Theorem 1 (Completeness). Hx has ground energy if and only if there exists \ W) such that 
AP{Ux,\W)) = l, 

and 

Theorem 2 (Soundness). If AP{Ux, \W)) < | for all \W), then Hx has ground energy Q . 

Note that in our definition of quantum 3-SAT we require that in the "no" case the ground energy 
is greater than or equal to 1, whereas Theorem 2 gives a bound of O {g~^)- To form an instance of 
quantum 3-SAT as defined above we repeat each projector Hi^x in the instance a suitable number of 
times (i.e., @{g^) times). This shows that any promise problem in QMAi can be reduced to quantum 
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3-SAT. Since quantum 3-SAT is also contained in QMAi we have proven that it is complete for this 
complexity class. 

Our mapping from the verification circuit Ux to the Hamiltonian Hx relies on two technical 
innovations. Like many previous works in the field of Hamiltonian complexity, we use a "clock 
construction" . In this work we introduce a new one which has some special properties. Most previous 
QMA- or QMAi-hardness results use a circuit-to-Hamiltonian mapping which is an immediate and 
simple application of the clock construction (the standard approach uses a Hilbert space with a 
computational register and a clock register). In contrast, in this work we define a novel circuit- 
to-Hamiltonian mapping where the Hamiltonian Hx acts on a Hilbert space with a computational 
register along with two clock registers. 

The paper is organized as follows. In Section 3 we introduce our new clock construction. In 
Section 4 we describe Hamiltonians acting on two clock registers which illustrate the main ideas of 
our proof that quantum 3-SAT is QMAi-hard. Then in Section 5.1 we define the Hamiltonian Hx 
and in Section 5.2 we characterize its zero energy eigenspace, establishing Theorem 1. We prove 
Theorem 2 in Section 5.3, using a spectral bound due to Kitaev [14]. 

3. A NEW CLOCK CONSTRUCTION 

A clock construction is a local Hamiltonian along with a set of local operators which act on its 
groundspace in a certain way. It can be used as a set of building blocks to define more complicated 
Hamiltonians while keeping track of the groundspace. The novel clock construction that we intro- 
duce in this Section is a central part of our QMAi hardness result. In this Section we focus on the 
construction itself and discuss its properties. Then in Section 4 we show how to build interesting 
Hamiltonians using two clock registers. This idea is developed further in Section 5 where we define 
our circuit-to-Hamiltonian mapping. 

In Section 3.1 we give some historical context, in order to motivate the notion of a clock con- 
struction. Then in Section 3.2 we summarize the properties of the new one that we introduce in this 
work. Finally, in Section 3.3 we provide all the details of our construction. On a first read through 
this paper the reader may wish to skip Section 3.3 since most of our results (with the exception of 
those presented in Appendix C) are derived using only the properties described in Section 3.2. 

3.1. Feynman's circuit-to-Hamiltonian mapping and Kitaev's clock construction 

Feynman showed how to map a sequence of unitary operators into a Hamiltonian in an interesting 
way [9]. This mapping is often used to convert statements about quantum circuits into statements 
about Hamiltonians. Let us start with a quantum circuit C that acts on n qubits and consists of a 
product of m one- and two-qubit unitaries 

Wm-lWm-2 ■ ■ - Wq. 

Now consider a Hilbert space with two registers. The first register holds n qubits and the second 
register holds an (m + l)-level system with orthonormal basis states \t) for i = 0, . . . , m. Feynman's 
Hamiltonian is 

H^{C) =Y.2 {^'^ + '^'^ \t + + M - \t){t + 1\ - Wt \t + l){t\^ . (3.1) 

t=o 

(Strictly speaking, this definition differs slightly from Feynman's original Hamiltonian-we have 
added the first two terms in parentheses). Note that each of the terms in the sum is a projector. 
Zero eigenvectors of the tth term which have all of their support on the clock states \t) and |i + 1) 
have the form 

\i;)\t)+Wtmt + '^) 
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where \tp)is an n-qubit state. Using this fact, one can show that every state in the zero energy 
groundspace of Hp{C) is of the form 



1 



|HistF(</')) = ( mO) + Y,Wt-iWt-2...WG 

t=l 



where \(p) is an n-qubit state. The state iHistp ((/>)) is sometimes called a history state because it 
contains every intermediate state Wt-iWt-2 ■ ■ ■ Wo\(p) obtained during the course of applying the 
circuit C to the initial state {(p). The second register is called the clock register and keeps track of 
the number of unitaries that have been applied. 

The clock register in Feynman's construction is an (m-|- l)-level system. However, Kitaev noticed 
that a modification of Feynman's idea can be used to map the circuit C into a local Hamiltonian 
acting on a system made only from qubits. Again the Hilbert space has two registers; the first holds 
n qubits as before but now the second register has m qubits. The idea is to encode Feynman's m + 1 
clock states as m-bit unary strings 

|t)u = |1^0^). 

t m—t 

The (m-l-l)-dimensional span of these clock states is called the clock subspace. It is the groundspace 
of the 2-local, m-qubit Hamiltonian 

m—l 

^^naW=E|01)(01|v+l- 

1=1 

This is the first part of Kitaev's clock construction: a local Hamiltonian acting on a system of qubits 
which has the desired number of groundstates. The second part of the clock construction is a set 
of local operators which act in a special way on states that have all of their support in the clock 
subspace. For any unitary U acting on the first register, define projectors^ 

hlt+iiU) = ^il0\lOO){lOO\t,t+i,t+2 + I^\nO){lW\t,t+i,t+2) (3.2) 



I (c/t |100)(110|t,t+i,t+2 + |110)(100|t,t+i,: 



These are called the transition operators for the clock. Note that on the LHS of this expression the 
subscript labels the operator, whereas on the RHS the subscript indicates which qubits the operator 
acts on nontrivially. Writing Ii\]^lry for the projector onto the clock subspace, we have 

(i n(-),y) hi,_,,{u) (i ® n(™),y) =1 (1 \t){t\^ + 1 |t + + 1|„) (3.3) 

-I {u^ ^ \t){t + l\u + U^\t + , 

which should be compared with (3.1). Kitaev's Hamiltonian is 

m—l 

Hk{C) = I Htly + E hlt+iiWt) (3.4) 

t=o 

Since both terms in (3.4) are positive semidefinite, every state in its zero energy groundspace is a 
zero eigenvector of the first term. Within the nullspace of I iS" i?u™ary, Hk{C) acts in the same way 
as Hy{C). Thus, every state in the groundspace of (3.4) is a history state 

/ m \ 

■ ■"\+Y,wt-iWt-2 . ■ - Womt)^ 



t=i 



^For t = Q and t = m — 1 these operators should be defined in a slightly different but self-explanatory way. 



QUANTUM 3-SAT IS QMAi-COMPLETE 



7 



for some n-qubit state |(/>). Furthermore, the Hamiltonian Hy^{C) is 5-local since each unitary Wj is 
either one- or two-local. This circuit-to-Hamiltonian mapping was used by Kitaev in his proof that 
5-local Hamiltonian is QMA-complete [ ]. 

Let us now view Kitaev's clock construction as a mathematical object of independent interest. 
In our view, the clock construction is specified by the Hamiltonian H^lry along with the transition 
operators which act as in equation (3.3). This is the set of operators which Kitaev used 

to instantiate Feynman's Hamiltonian as a 5-local Hamiltonian acting on a system of qubits. In 
Kitaev's construction the Hamiltonian H^lry is a sum of 2-local projectors and the transition 
operators are {k + 3)-local projectors where k is the locality of the unitary U. In contrast, in this 
Section we introduce a clock construction where the clock states are groundstates of a Hamiltonian 
that is a sum of 3-local projectors and where the transition operators are {k + 2)-local projectors. 
If we naively replace Kitaev's clock construction with ours, it allows us to instantiate Feynman's 
Hamiltonian as a 4-local Hamiltonian. This is not good enough for our purposes since we are 
interested in quantum 3-SAT where the projector terms are 3-local. The circuit-to-Hamiltonian 
mapping that we define in this paper is not based on Feynman's Hamiltonian, and in particular 
only ever uses the transition operators hf^_^i{U) for single-qubit unitaries U. Nevertheless we are 
able to encode a computation consisting of 1- and 2-qubit gates in the ground state of the resulting 
Hamiltonian. This nontrivial fact is one of the main contributions of our paper, and is the subject 
of Sections 4 and 5. 



3.2. Summary of the new clock construction 

Our construction, including explicit expressions for all the operators mentioned below, is pre- 
sented in full detail in Section 3.3. Here we summarize its features. As discussed above, the crucial 
difference between our clock construction and Kitaev's is the locality of the transition operators. 

For any G {2, 3, . . . }, we present a Hamiltonian 

rr{N) 
-"clock 

which acts on the Hilbert space 

hSk = (C=)™-' (3.5) 
of 7A^ — 3 qubits and which is a sum of 3-local projectors from the set V given in Definition 3. The 
zero energy groundspace of H^^^]^ is spanned by orthonormal states 

\Ci), i = l,...,N. 

Now let "Hcomp be a computational register containing some (arbitrary) number of qubits, and let 
U he a unitary acting on this register. We exhibit projectors 

for i = 1, . . . , N — 1, which act on 

n-comp ^ 'T-clock ' 

These are the transition operators (3.3) for the clock. Specifically, they satisfy 

I ® ^iioL) Kr+i{U) (l » H^;^),) =^ (I » + I |Q+i)(Q+i|) 



I (f/^ ® \Ci){Ci+i\ + , (3.6) 



where H^j^^j^ = YliLi \Ci){Ci\ projects onto the clock subspace. Comparing these operators with 
Kitaev's, we see that the prefactor of ^ in (3.3) has been replaced with | in (3.6). For our purposes 
only the nullspaces of these operators are relevant, and this prefactor does not affect the null space. 
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A much more important difference is the locality. In our case, the operator hi^i+i{U) is a (A; + 2)- 
local projector where k is the locality of the unitary U. When U is the identity the projector 
acts nontrivially only on two qubits of ^^j^^k write 

hi,i+i = 

Thus, for a single-qubit unitary, /ij^j+i({7) is only 3- local (in contrast with Kitaev's clock where 
hfj^_^_l{U) would be 4-local). Our circuit-to-Hamiltonian mapping, presented in Sections 4 and 5 
exploits this feature (it is partly inspired by the railroad switch idea from [ ]). 
Finally, we also exhibit 1-local (single-qubit) projectors 

C>i and C<i (3.7) 

for i = 1, . . . , N , whose role is to "pick out" clock states \Cj) with j > i or j < i respectively. They 
act on the Hilbert space (3.5) of the clock and satisfy 



^iiolc>,uiZl = \\Q){a\+ 5^ \C,){C,\ (3.8) 

i<j<N 

^[Zlc<,uiZ = \c,){c,\ + (3.9) 



i<j<j 



with the understanding that when i = 1 the first term in (3.9) is zero and when i = N the second 
term in (3.8) is zero. As in (3.6), only the nullspaces of the operators on the RHS of (3.8) and 
(3.9) are important for our purposes. In particular, it is not significant that the \Ci){Ci\ terms have 
different prefactors, since the (positive) value of these coefficients do not affect the nullspace. 

3.3. Details of the new clock construction 

Here we present the details of the clock construction described in Section 3.2. The reader may 
safely skip this Section on a first read through this paper. Subsequent Sections can be understood 
using the summary presented in Section 3.2. 

Our goal is to define H^^^^^ along with the operators C>j, C<i, hi^i^i{U) satisfying the properties 
specified in Section 3.2. We present our construction in two steps. First, we define a Hamiltonian 
^tri^et that we call the "triplet" Hamiltonian. It already has many (but not all'^) of the properties 

that we desire for our clock construction. In the second step, we construct H^^^y^ from the "triplet" 
Hamiltonian by appending another register and adding terms which act between the two registers. 

Am 

triplet 



Let G {2,3,4, ... }. We now define the triplet Hamiltonian H^'^-^l^ which is a sum of 3-local 



projectors and acts on the Hilbert space of 3(2A^ — 1) qubits: 



^ri2t=^l + ^2 + ^3, (3.10) 



We can't exhibit the type of operators in (3.7). 
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Figure 3.1. The terms Hi, H2 and in the Hamiltonian H^'^^^^^^ (3.10) involve 
consecutive triplets of qubits. 



where 

2N-2 



Hi=Y, + |010)(010| + |001)(001| + |r)(^-|)3,_,l_3,+2,3^+3 (^-H) 

i=0 

+ |000)(000|i23 + (|100)(100| + |011)(011|)3(2^_2)+i,3(2JV-2)+2,3(27V-2)+3 ' 
2Af-3 

^2 = ^ (|10)(10| + |01)(01|)3,+2,3.+3 ® (Il)(l|3m + |l)(l|3^+5 + |l>(l|3.+6) (3.12) 
i=0 
2W-3 

+ |00)(00|3m,3i+2® (|l)(l|3i+4+|l)(l|3i+5 + |l)(l|3i+6), 

i=0 
2Af-3 

^3 = X] l7>(7|3i+3,3i+4,3i+5 (3.13) 



i=0 

act on triplets of qubits as in Figure 3.1, with \9^) and I7) given by 

\e^) = (1100) ± 1011)) , I7) = ^1100) - y||oii). 

We now construct 2 A'" orthonormal basis states which span the ground space of -f^tripief First, 
consider Hi. Observe that the groundspace of Hi is spanned by the set of all products of three 
qubit states of the form 

|X1>|X2) • • • \X2N-l), 

where 

IXi) G{|11O),|1O1),|0+)}, 

\Xj) G {|000), |110), |101), 1^?+)} for j = 2, . . . , 2iV - 2, 

Ix2iv-i) e{|ooo),|iio),|ioi)}. 

Let us now consider the action of H2 on the groundspace of Hi. The terms in H2 assign an 
energy penalty to certain products of three qubit states. The first term penalizes any state where 
\X'i) £ {|110)) |101)} but 7^ |000). The second term penalizes states where \xi) = |000) but 

IXi+i) 7^ |000). The projector onto the zero energy groundspace of Hi + H2 is therefore given by 

4Ar-2 2Af-2 

ni2= \^)(^\ + E (3-14) 

i=l k=l 
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where 

|T) = |110)|000)|000) . . . |000), (3.15) 
|2) = |101)|000)|000) . . . |000) 
|3) = \0+) |110)|000)...|000), 

|4) = \e+) |ioi)|ooo)...|ooo), 

\AN~^3) = \e+) \e+) ... \e+) |iio), 

\m^2) = |6'+) ... \e+) |ioi) (3.16) 

and 

1^) = |0+)®'=|OOO)®2^-i-'= (3.17) 

for k = 1,...,2N — 2. Note that the states \i) each contain an "active" triplet |110) or |101) 
separating \6~^) to the left and |000) to the right. In contrast, the states |A;) do not have an active 
triplet separating the two regions. 

The role of is twofold. It assigns an energy penalty to each of the states {\k)} and to certain 
linear combinations of the states {\i)}. This can be seen by looking at the restriction of to the 
groundspace of Hi + H2, 

2N-1 2N-2 

UuHsUu = ^Y1 - 12^^)) ((2r^| - (21^1) + g 5^ (3.18) 

i=2 k=l 

We are now able to fully characterize the zero energy groundspace of -f^^ripief spanned by the 
2N states 

|ci) = |T), (3.19) 

\ci) = (\2f^) + \2f^)^ for i = 2, . . . ,2N - 1, (3.20) 

|C27V> = |4lV^2). (3.21) 

We now consider some local operators and their actions in the zero energy subspace of ^^trlpief 
We will see that they have properties similar to those described in Section 3.2. 
Define 2-local projectors 

qi = |10)(10|23, 

Qi = |01)(01|3^_4,3^-3 for i = 2, . . . , 2N, (3.22) 
and note that, projected to the groundspace of H^^"^-^^^^, we have 

n(2^)Q,n(2^)=a,|c.)(c.|, (3.23) 

where II^^^) = Yl'i=i and 

fl, ifiG{l,2iV} 

ai = < 1 ^, . (3.24) 
I 2 , otherwise. 

Now adjoin another register so the Hilbert space is 
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and let U he a, unitary acting on ?^comp- Define 

9i,i+iiU) = (ai+il® |10)(10|3i-i,3* + |01)(01|3i-i,3i) (3.25) 



^"'^'"^ (U^ ® |10)(01|3i_i,3i + U(^ |01)(10|3.-1,3, 



for i = 1, . . . , 2N — 1. Note that gi^iJ^i{U) is a (A; + 2)-local projector if f7 is a fc-qubit unitary, and 
furthermore 

{i ® n(2^)) gi,i+i{u) {i (E) n(2^)) = ft (I ® \c,){ci\ + 1 (g) |c,+i)(ci+i|) 

- ft (U^ ^ \ci){ci+i\ + |c,+i)(q|) , (3.26) 

where 

ft= "2^^' =<!r "r^:'"^' (3.27) 

Equation (3.26) should be compared to (3.6) 

Now we are ready to define H^^l-^^ 
struction. Consider the Hilbert space 



ai+iaj _ fg, if i G {l,2iV- 1}, 
Ui + Oi+i 1 J, otherwise. 

to (3.6). 

Now we are ready to define H^^l-^^ and the associated operators which make up our clock con- 



and the Hamiltonian 

N 

W -11 -r Ji W -'-'unary "T -'-'sync T 

1=1 



^cloi = ^tSet » I + I ^ ^^niry + ^^sync + <72.-l,2.«), (3.28) 



where af is the operator acting on the ith qubit of the second register. Observe that each 
operator 521-1, 2i(ff) (defined through (3.25)) is a 3-local projector which acts on qubits 6i — 4 and 

6i — 5 of the first register and qubit i of the second register, //unary acts on the second register as 

AT-l 

H^^l^=Y,mm^,^+l (3-29) 
i=l 

and its ground state subspace is spanned by the unary states 

|i)u = 1 ■ (3.30) 

t N-t 

The Hamiltonian i/sync acts on both registers as 

2Af-l 

//sync = gi®|l)(l|l+ Yl ® (|0)(0|[|J +|l)(l|[|J-fl) +'?27V^|0)(0|iV. (3.31) 

i=2 

where qj is defined in (3.22) and [-J is the floor function. Here the tensor product separates the 
first 6A^ — 3 qubits from the last qubits. 

The zero energy groundspace of -fffri^iL (X" I + I (SD Hunlry + -f^sync is spanned by the states 

|e,) = |c,)|Lj72j)u (3.32) 

for j = 1, . . . , 2N, where \cj) are the ground states of H^^^^^^^ as defined in equations (3.19)-(3.21). 
Let ni^^-* be the projector onto the subspace spanned by {|ej)}. The last term in (3.28), the 
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operator X^i fl'2i-i,2i('7f ), acts within this space as 
/ N \ N 

lif^) 52.-1,2.(0 n(2A^) = Y,p2^-l (|e2.-i) - 162.)) ((e^.-ij - (e^.j) (3.33) 
\j=i / .=1 



where /3j is defined in (3.27). Taking Unear combinations of the states (3.32) which are zero eigen- 

clock' 



vectors of (3.33), we finally get a spanning set of zero energy groundstates for H^^^ ■ 



\Ci) = -^(|c2.-i)K-l)u + |c2i)|i)u) (3.34) 
= -^(|c2.-i)|l_^0j^) + |c2i)|l_^0_^)) (3.35) 

i-l N-i+l i N-i 

for i = 1, . . . , A^. As an example, we expand these states in the computational basis for = 4 in 
Figure B.l in Appendix B. 
We now define the operators 

C<i = 1® |0)(0|i, (3.36) 
C>i = ICS\l){l\i, (3.37) 

which act on the ith qubit of the second register, for i = 1, . . . ,N. Using (3.35) it is easy to verify 
that these operators satisfy (3.8) and (3.9) as claimed in Section 3.2. 

Finally, we are ready to define the transition operators hi^i+i{U) and to show that they satisfy 
(3.6). We consider a Hilbert space 

^comp ® ^^2k = ^comp ® (C^)'"^"' ® (C^)"^ 

and a unitary U which acts on ^comp- Define 

hi,i+i{U)=g2L2i+i{U)^I (3.38) 

for i = 1, . . . , N — 1. Here g2i,2i+i{U) acts on the computational register and two out of the 6A^ — 3 
qubits in the second register. Note that /ij^j+i(f/) is a (/c + 2)-local projector when [/ is a A;-qubit 
unitary. Using equations (3.38), (3.35), (3.26) and the fact that j32i = \ for alH = 1, . . . , — 1 we 
confirm (3.6): 

(i ® nJSk) K^+l{u) (i ® li^^J^^ = \{i® |c.)(ai + 1 ® ia+i)(a+ii) 

-\(u^® \Ci){Ci+i\ + U®\Ci+i){Ci\). 

We can also write an explicit expression for hi^i+i{U) using (3.25) and the fact that a2i = a2i+i = \ 
for alH = l,...,iV- 1: 

hi,i+i{U) = 1 (I ® 1 10) (10|6._l,6i I + I |01) (01|6i-l,6i ® I) 

-\(U^(^ |10)(01|6i-i,6. (^l + U(^ |01)(10|6i-i,6. » l) . (3.39) 

Finally, note that H^J^^ is a sum of 3-local projectors. We now show that each of the projectors 
in the sum is from the set V given in Definition 3. Looking at equations (3.11)-(3.13) we see that 
-^tri^et ^ svlui of projectors which are diagonal in the computational basis (and which satisfy 
condition 1 in Definition 3) along with projectors of the form \9~){9~\ (which satisfy condition 1 

in Definition 3) and projectors of the form |7)(7| (which satisfy condition 2). -ffunary and i^sync 
are sums of classical projectors which satisfy condition 1. Now consider the terms 52.-1, 2i(o"f) for 
i = 1, . . . ,N . Looking at equations (3.24) and (3.25) we see that, for z G {2, . . . , — 1} each of 
these terms is a projector which satisfies condition 1. We consider the terms with i = 1 and i = N 
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separately. First, look at 51,2 (ci ) which acts on qubits 2 and 3 of the first register and qubit 1 of 
the second register as 

J (|10)(10| 01 + 2 |01)(01| (8)1- \/2|10)(01| (8 CT^ - \/2 1 01) (10 1 (80-, 
= ^ (|10)(10| + 2 |01)(01| - \/2 |10)(01| - \/2 |01)(10|) |+)(+| 

+ ^ (|10)(10| +2|01)(01| + \/2|10)(01| + V2|01)(10|) ® |-)(-| 

where |+) and |— ) are the eigenstates of the Pauli cj^' operator. It is not hard to see that each of 
the two terms on the RHS of this equation is a projector which satisfies condition 2 from Definition 
3. A similar decomposition can be used to write g2N-i,2N{(y%) as a sum of two projectors satisfying 
condition 2. 

This completes our description of the clock construction with the properties outlined in Section 
3.2. 

4. Hamiltonians acting on two clock registers 

Here we develop the main ideas behind our circuit-to-Hamiltonian mapping, using the new clock 
construction described in the previous section. A key feature of our approach is that we use two 
clock registers, with Hilbert space 

^iJ^L^^Sk- (4.1) 

Let's consider some local operators which act on this space. The Hamiltonians 

I^^clock and HlZl®l 
are both sums of 3-local projectors as discussed in the previous section. Since C<j and C>i are 
1-local projectors, we can form 2-local projectors by taking tensor products, e.g.. 

Similarly, since the operators h^^k+i are 2-local projectors, terms such as 

hk,k+i "8 C<i 

are 3-local projectors. For convenience and to ease notation later on, we define the following sum 
of such terms 

gik,k+2) ^ ^ C>(jt+2) + hk,k+l (8 C<(fc+i) + /l(fe+l),(fc+2) ^ C>{k+i) (4.2) 

+ C>{k+2) C<k + C'<(fc+i) hk^k+1 + C'>(fc+i) "8 h(^k+i),{k+2) 

foT k = l,...,N -2. 

We begin by looking at a simple Hamiltonian which acts in the Hilbert space (4.1); this example 
introduces some notation and conventions that we use later on. We then consider two examples 
where the Hilbert space (4.1) is tensored with a computational register. These examples contain 
the essential ideas behind our proof in Section 5 that quantum 3-SAT is QMAi-hard. 

4.1. Warm up example 

As a warm-up, consider the following Hamiltonian acting on the space (4.1) with = 9: 

^^H^!L + hSL^I + S^^''\ (4.3) 

with given by (4.2). We will see how the zero energy groundspace of this operator can be 

represented pictorially. 
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Recall (from Section 3.2) that H^^^^y. has 9 orthonormal zero energy states \Ci) for i = 1, . . . , 9. 
The first two terms of (4.3) 

therefore have 81 zero energy ground states which we choose to represent as a set of vertices arranged 
in a 2D grid, as shown in Figure 4.1(a). We adopt the convention that the vertex in the top left 
corner has coordinates = (1,1), the i coordinate increases moving to the right and the j 

coordinate increases moving downwards. The vertex with coordinate (i,j) is associated with the 
groundstate \Ci)\Cj). 

We add S'(^'^) to (4.4) a few terms at a time. First look at 

I ® ^clock + ^ I + C<4 C>6 + C>6 C<4 

which is just the first two terms of added to (4.4). Using the expressions (3.8) and (3.9) we 

see that adding this term assigns an energy penalty to all the states \Ci)\Cj) with either i < 4 and 
j > 6 or z > 6 and j < 4. Eliminating the corresponding vertices from Figure 4.1(a) we get Figure 
4.1(b). 

Now look at the next term which is /i4_5 (S" C<5. Using equations (3.6) and (3.36) we get 

= I (IC4) - 1C5)) ((C4I - (C5I) ® E (1 - 1^^'^) \Cj){c,\. 

j=i 

From this we see that states |C4)|Cj) and \ C5)\Cj) for j = 1, . . . , 5 are not zero energy states for this 
term although their uniform superpositions (1^4) + IC5)) \Cj) are. We represent the groundspace 
of 

I ^ ^clock + ^clock I + <^<4 ® C>6 + C>6 «) C<4 + /l4,5 «> C<5 

as the graph in Figure 4.1(c), where now ground states are in one-to-one correspondence with 
the connected components of the graph. The ground state corresponding to a given connected 
component J7 is the uniform superposition 

(up to normalization) . The next three terms modify the picture in a similar way and the groundspace 
of I (g) ^^cfock + -^cfock <S5 1 + 5*^^'^) is represented as the graph shown in Figure 4.1(d). 



(a) (b) (c) (d) 

Figure 4.1. The groundspaces of (a) te^ekJck+^ciock^I' (b) I«'-?^iiock+^ciock«'I+ 

and (d) I -^dick + -^ciock ^ + S^'^'^\ In these graphs each connected component 
is associated with a ground state of the Hamiltonian. 
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4.2. A single-qubit unitary 

Next, consider an example with two clock registers with = 6 and a computational register 
containing a single qubit. The Hilbert space is 

Let f7 be a (single-qubit) unitary acting on the computational qubit and define 

Hiq{U) = 101® H^^l^^ + 1 H^^l^ I + 1 5(^-3) + 1 + Hu, (4.5) 

where 

Hu = huiU)^! + 1^1^ h34- (4.6) 
Here h34{U) acts nontrivially on the computational qubit and two qubits of first clock register. 

We analyze the groundspace of (4.5) in two steps. First, we represent the groundspace of the 
sum of the first four terms using a picture, as in the previous example. Then we consider the action 
of Hjj on this space and obtain the zero energy states for (4.5). 

First, consider 

which acts in the space 'hl^l^y^ (8) ^^klck ^^'^ note (using the graphical representation discussed in 
the previous example) that its nullspace can be represented as Figure 4.2. In the Figure we label 
vertices of the graph as (i, j) with the top left vertex labeled (1, 1), i increasing to the right and j 
increasing downward. A ground state is associated with each connected component IC, C, M.,M as 
shown in the Figure, given by 

\S)= \Cm), (4.7) 

where S G {fC, C,A4,J\f}. In this paper we will often work with unnormalized states such as these. 



n 



Figure 4.2. The four groundstates of H^f^^^ I + I iJ^jJ^k + S'^i'^) + S^^'^^ are 
associated with the four connected components of this graph, which we label 

The groundstates of Hiq{U) are superpositions of 

|z)|/C), \z)\C), \z)\M), \z)m, ZG{0,1}. (4.8) 

which have zero energy for Hjj. We solve for them as follows. First, note that 

|z)|/C), U\z)\C), \z)\M), U\z)m (4.9) 

for z G {0, 1} span the same space as (4.8). This basis is convenient because Hjj does not connect 
states with z = to states with z = 1. We evaluate the matrix elements of Hjj between these 
unnormalized states using (3.6). For each z G {0, 1}, Hjj acts as a 4 x 4 matrix within the space 
spanned by the four states (4.9) (since it does not connect states with different z). This matrix is 
the same for z = and z = 1 and is given by 

/ 2 -1 -1 \ 

1-1 2 0-1 

4 -1 2-1 

\ -1 -1 2 / 
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with the ordering of basis states as in (4.9). The unique zero eigenvector of this matrix is the 
all-ones vector. This means that the groundspace of Hiq{U) is spanned by the two states 

\z)\IC) + U\z)\C) + \z)\M) + U\z)\M), z £ {0, 1}. 

Note that to solve for these zero energy eigenvectors it was sufficient to consider the matrix elements 
of Hjj in the unnormalized basis (4.9). 

Now considering superpositions of these two states we see that every state in the groundspace of 
Hiq{U) has the form 

mic) + u\(t>)\c) + \4>)\M) + u\4>M) (4.10) 

for some single-qubit state In this example we view the state |Ci)|Ci) (corresponding to the top 
left vertex in Figure 4.2) as the initial state of the two clocks, and we view the state |C6)|C6) (the 
bottom right vertex) as the final state. We interpret (4.10) as a history state for the computation 
that consists of applying U to the state {(p). 

4.3. A two-qubit unitary 

Now consider an example where = 9 and the computational register contains two qubits. The 
Hilbert space is 

Define 

i/2q = I I + I ® -^^clock ® I + I ® ^^^'^^ + I ® S^^^^'^ + Hv, (4.11) 

where 

Hv = -f^horizontal + -f^vcrtical (4-12) 

and -^horizontal iuvolves transitions of the first clock register whereas -ff vertical involves transitions of 
the second clock register. Labeling the first computational (control) qubit a and the second (target) 
one b, we define 

-f^horizontal = |0)(0|a /l34 «) I + I /l34 «) C>7 + I «) /i56 «> C<3 + /l45(Sb) ^ I 

+ |0)(0|a <E)he7(g)I + I(g)hG7 0C>7 + l0 /i56 «) C>7, (4.13) 

-^vertical = |l)(l|a O I /134 + I C>7 /l34 + I C<3 /l56 + hi^ial) 

+ |l)(l|a O I /l67 + I C>7 /l67 + I C>7 /l56- (4.14) 

Here the single-qubit unitaries which act on qubit b are 

"' = {1 -1) ^ = ;7f(! i)- 

In (4.14) the operator h^^la^) acts nontrivially on the computational qubit b as well as the second 
clock register (and acts as the identity on the first clock register). 

Note that H2q is a sum of 3-local projectors. We now discuss its groundspace. 

Look at the first four terms in (4.11) which act as 

^^hSL + hSL,^I + S('''^ + S('''^ (4.16) 

on the two clock registers. Using our graphical notation, the zero energy groundspace of (4.16) can 
be represented as the black graph shown in Figure 4.3 (a) and (b). A ground state is associated 
with each of the 25 connected components of this graph (as discussed in the Figure caption). Now 
adjoining the two-qubit computational register, we get 100 basis vectors for the nullspace of 

1 1 H^^l^ + 1 H^^l^ ® I + 1 ^ + 1 ® , (4.17) 
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four for each connected component. States in the nullspace of i?2q are superpositions of these 100 
basis vectors that also have zero energy for Hy, that is to say, zero eigenvectors of the matrix 

{J2\{y'\{x'\Hv\x)\y)\Ji) (4.18) 

where Ji and J2 are connected components of the graph in Figure 4.3 and x, y, x' , y' G {0, 1}. (Here 
\Ji) and \ J2) are defined through (4.7)). One could now proceed to solve for the nullspace of H2<^ 
by explicitly constructing the matrix elements (4.18) and analyzing the resulting 100 x 100 matrix. 
However, computing the matrix elements (4.18) is a tedious exercise. To save space and time, we 
take a different approach here. We provide a Lemma which characterizes the nullspace of -ff2qi and 
we describe a simple way that the reader can verify our claim. 

It will be helpful to use the sets of vertices IZq^Qq^ 3^0) and IZi, ^1, 3^i, Bi depicted in Figure 4.3. 
For each set we define an unnormalized state through (4.7) (now letting S be any set of vertices). 
For example, 

|3^o> = \C2)\C7) + |C3)|Cr) + \C^)\C^) + |C2)|C8) + \C^)\C^) + \Ci)\Cs). 
Note that each of the states 

l^o),|ao),|3^o),|fio) and |7^l), l^i), |3^i), (4.19) 
have zero energy for (4.16). The following Lemma characterizes the groundspace of -ff2q- 
Lemma 1. The groundspace of H2q is spanned by 

\rv') = k)|y)|7l.) + (Q|x)|y))|g,) + (Q|x)|y))|3;,) + (y|x)|y))|^,) 
for x,y G {0, 1}, where the two-qubit unitaries Q,Q, and V are given by 

Q = |0)(0| 05+ |1)(1| ®^7^ 
Q = |0)(0| {B^a'B) + |1)(1| {a'Ba') , 

V = |0)(0| (a'B) + |1)(1| (Ba') , (4.20) 

with the single-qubit unitaries B and as in (4.15). 

Note that, since \ipy^) has support only on states (4.19) of the clock registers, it has zero energy 
for (4.17). Using equations (3.6), (3.8), and (3.9) the reader can verify that each state \'4^y') also 
has zero energy for Hy- It remains to show that these four states span the groundspace of H2q^. 
We recommend using a computer to verify this fact. To do this, one can numerically diagonalize a 
specific 324 x 324 matrix: the restriction of i?2q to the space spanned by 

\z^)\z2)\Ci)\C,) 

with i,j = 1, ... ,9 and 21,22 £ {0, 1}. It is easy to compute the matrix elements of H2c^ in this 
basis using equations (3.6), (3.8), and (3.9). We have included in our arxiv submission an ancillary 
file (a Matlab script) which numerically diagonalizes this matrix and confirms that the states IV'y') 
span the nullspace of -ff2q- 

The reader may find it helpful to look at Figure B.2 from Appendix B in order to understand 
how the states \ipy') arise as ground states of the Hamiltonian H2q. 

Using Lemma 1 we see that any state in the groundspace of -ff2q is a superposition 

E '^-vW) = \^)\Ci)\Ci) + lother) + {V\ct>)) \C^)\C^), (4.21) 

x,ye{0,l} 

where 

a;,j/G{0,l} 
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7^n 



3^0 



□ 



7^1 



Bo 



yi 



□ 



(a) 



(b) 



Figure 4.3. The black graph (drawn twice for clarity) depicts the groundspace of 

^ ^ ^ciock + ^ciock ® I + S^^'^^ + '5^^'^^- The top left vertex is labeled (1, 1) and the 
bottom right vertex (9, 9). Each connected component corresponds to a ground state, 
given by the uniform superposition of states \Ci)\Cj) with in the component. 
In (a) we have defined sets of vertices TZq, ^Oi 3^0i Bq and in (b) we have defined sets 

ni,gi,yi,Bi. 



and |other) has no support on clock states |Ci)|Ci) or \Cq)\C()). We view |Ci)|Ci) as the initial 
state of the two clocks and \Cg)\Cg) as the final state of the two clocks, and we interpret (4.21) as 
a history state for the computation that consists of applying the two-qubit unitary V from (4.20) 
to the state {(p). 

Finally, we show that the two-qubit unitary V is an entangling gate. To see this, note that by 
multiplying it with single-qubit T and Hadamard gates we obtain the CNOT gate: 



(t'^ [T^HT^]^ V = CNOT. (4.22) 

The reader may already see where this is going. In this Section we exhibited Hamiltonians Hiq{U) 
and which are sums of 3-local projectors and which have ground states that can be viewed as 
history states for any one-qubit computation and a specific two-qubit computation respectively. 
Now we show how to put these ideas together to make a quantum 3-SAT Hamiltonian that is 
associated with a sequence of one- and two-qubit gates. 

5. Quantum 3-SAT is QMAi-hard 

In this Section we prove that quantum 3-SAT is QMAi-hard, following the strategy outlined in 
Section 2. We exhibit our circuit-to-Hamiltonian mapping and we prove Theorems 1 and 2. 

Recall from Section 2 that we consider a verification circuit which implements a unitary Ux on 
n + Ha qubits, of which are ancillas initialized to |0) at the beginning of the computation. It is 
expressed as a product of g gates from the set {H,T, CNOT}. We begin by rewriting this circuit 
in a canonical form. 

Equation (4.22) expresses the CNOT gate as a product of H and T gates and the two-qubit gate 
V (4.20). Using this identity we efficiently rewrite the given circuit so that it is a product of @{g) 
gates from the set 

{H,T,V}. 

For convenience, we then rewrite the circuit so that it is expressed as a product with M = Q{g) 
single-qubit gates alternating with M two-qubit V gates: 

Ux = Va,,_,bM-,U''-' . . . Va.b.U'Va.boU", (5.1) 
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where each single-qubit gate ,U'^ , . . . U^^ ^ is either T or the identity, and where 

ao, . . . , OM-i, ^0, • • • , hM-i G [n + Ua] 

are the labels of the qubits on which the V gates act. An arbitrary circuit expressed using this gate 
set can always be efficiently rewritten in this form. To see this, note that we can always place a 
unitary equal to the identity in between any two consecutive two qubit gates. Furthermore, using 
the fact that 

= 1, 

we can replace the product of any two consecutive single-qubit gates U^U'^ by ■ Vab ■ I • Vah ■ U'^, 
with the gate Vab acting on some pair of qubits a, b. 

5.1. The Hamiltonian Hx 

We define a Hamiltonian Hx which we associate with the verification circuit (5.1) and which is 
a sum of 3- local projectors from the set V in Definition 3. It acts on the Hilbert space 

rtcomp ^ ^clock ^ ^clock ' l^-^i 

where ?^comp is a computational register containing n + Ua qubits. Recalling (3.5), note that each 
of the two clock registers contains 63M + 18 qubits. 
First, consider the Hilbert space 

^(9M+3) ^(9Af+3) 
"•clock ^ "-clock 

of the two clock registers and define the following operator acting on this space 

Af-l 

<2 =^c?ol^'^®I + I®^ciol"''^+ E + +5(9"^+^'^^^^^^^ (5.3) 

j=0 

where S'('''''+^) is defined in (4.2). 

Let us pause for a moment and explain why we consider this operator. Using the graphical 
notation developed in Section 4, the groundspace of (5.3) can be represented as the graph drawn 
in black in Figure 5.1. For the moment, let us focus on the graph drawn in black and ignore 
all other aspects of the Figure. As described in the caption, a basis for the groundspace is in 1-1 
correspondence with the connected components of the graph. Note that the graphs from Figures 4.2 
and 4.3 each appear M times along the diagonal. This corresponds to the fact that the verification 
circuit contains M one-qubit gates and M two-qubit gates V. 

We obtain Hx by adding terms to I -ff^ilfg • ^'^'^ terms for each one- and two-qubit gate 
and we add terms which check the initial and final state of the computation. Specifically, let 



M-l 

Hx=I^ H^^f^l +J2{Hu + ^y) + ^init + ^end, (5.4) 
j=0 

which acts on the Hilbert space (5.2). Here 

ria 

i^init = ^\l){l\(i+n) «> C<i C<i, (5.5) 
1=1 

Hend = |0)(0|(„+i) (g) C>(9j\/4.3) (g) C>(^gM+3) 

ensure that each of the ancilla qubits is in the |0) state when the clock state is |Ci)|Ci), and that 
the first qubit in the ancilla register is in the state |1) when the clock state is \Cqm+3)\Cqm+3) ■ The 
operators 

HIj = hgj+3^gj+i{W) 0I + I(S>I^ /l9i+3,9j+4 (5.6) 
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are defined by analogy with (4.6) and involve the single-qubit unitaries {U^}. We also define 

~ -^horizontal + "^vertical i^-"^) 

by analogy with (4.12): 

^horizontal = |0)(0|a, ^ S-+6,9i+7 ® I + I ® /l9,+6 ,9j+7 ^ C'>9i+10 + I (K) hgj+s,9j+9 ^ C'<9j+6 
+ |0)(0|a, ft-9j+9,9i+10 (Xi I + I /l9j+9,9j+io <^ C>9j+io + I /l9j+8,9i+9 C>9j+io 
+ hgj+r,9j+8{Bb^^I (5.8) 



^vertical = \ '^){Ma, I H+6,9j+7 + I C'>9j+10 H+6,9j+7 + I C'<9i+6 hgj+s,9j~\ 



■9 



+ |l)(l|aj (8> I fX" /l9j+9,9j+io + I (8> C>9j+io lE> /l9j+9,9j+10 + I (K> C>9j-|-io C?) /l9j+8,9i+9 
+ H+7,9j+8(c^6^.)- (5.9) 

Note that Hx is a sum of 3-local projectors. Furthermore, each projector in the sum is of the 
form given in Definition 3. (To see this, first recall that in Section 3.3 we showed that -ffciock^^^ ^ 
sum of projectors from the set V. For the rest of the terms in Hx, one can use the definitions of C<j 
and C>i and /ij^j+i(C/) from equations (3.36), (3.37) and (3.39) to check that they are projectors 
satisfying condition 1 from Definition 3. Note that for the term hgj+3^gj+4^{U^) f^I appearing in 
(5.6) we use the fact that is either I, H or T. 

We now characterize the groundspace of Hx- 

5.2. The zero energy groundspace of Hx (Proof of Theorem 1) 

We now show that a zero-energy ground state of Hx exists if and only if there exists a witness 
\W) which the original verifier Ux accepts with certainty. We begin by defining some sets of vertices 
in the graph 5.1. For each copy j = 0, . . . , M — 1 of the graph in Figure 4.3 that appears in Figure 
5.1, we define sets 

K^o'o^yiBi and R{,gi,y(,Bi. 

Likewise, for each copy j = 0, . . . , M — 1 of the graph in Figure 4.2 that appears in Figure 5.1 we 
define sets 

in Figure 5.1, and for the copy with j = (in the top left) we also define IC^ as shown in the Figure. 
For each of these sets, we define an associated (unnormalized) state through (4.7). 

To analyze the groundspace of Hx, we add the terms in equation (5.4) one at a time, computing 
the zero energy states of the resulting operator at each step. 

We start with 

I^i^i^, (5.10) 
which (as discussed in the previous Section) has nullspace spanned by states of the form 

where J7 C [9M + 3] (X" [9M + 3] is a connected component of the graph drawn in black in Figure 5.1 
and z is an (n + na)-bit string. 
Now consider 

M-l 
j=0 

As the reader might expect, we are going to use Lemma 1 to solve for the zero energy states. We 
begin by considering the action of Hy in the basis (5.11). 
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□ 



□ 



]:«0 £1 



□ 



□ 



7^l 



^0^ 



□ 



M 



M-l 



n 



M-l 



M-l 



□ I 



M-l 



B, 



M-l 



Figure 5.1. A basis for the groundspace of H^^^ is in 1-1 correspondence with the 
connected components of the graph drawn in black. The vertices are labeled (i, j) 
with the top left vertex labeled (1, 1) and the bottom right vertex (9M + 3,9M + 
3). The ground state associated with a connected component J' is the uniform 
superposition \Ci)\Cj). 



Look at the graph in black in Figure 4.3 and note that there are M copies of this graph along 
the diagonal in Figure 5.1. Each copy j = 0, . . . , M — 1 contains 25 connected components JT". The 
operator Hy only has support on states \z)\J') when J' is one of the 25 connected components in 
the j'th copy. To see this, look at the definition of Hy in (5.7)-(5.9) and note that 

Hir\z)\J) = whenever J n {9j + 6, . . . ,9j + 10} {9j + 6, . . . ,9j + 10} = (5.13) 
This implies that the matrix element 

M-l 

J2{J2\{z2\Hi,\zM) (5.14) 
i=o 

is nonzero only when and are both contained in the same copy j. The matrix with entries 
(5.14) is therefore block diagonal with a nonzero block for each j = 0, . . . , M — 1. In addition to 
these blocks, there are "blocks" of size 1 ~ the states 
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|z)|/CO), \z)\M^), \z)\C^) (5.15) 

for j = 0, . . . , M — 1 and z G {0, l}"+"<i which have zero energy for (5.12). Let us now solve for the 
zero eigenvectors of (5.12) within each nonzero block. The block corresponding to a given value j 
is a (2"+"" • 25) x (2"+"" • 25) matrix with entries 

{J2\{Z2\HI,\ZM), 

where J^i and are from the corresponding set of 25 connected components. Recall that Hy acts 
nontrivially on qubits aj and bj and as the identity on the remaining 2"+""^^ qubits of the first 
register. Using this fact we see that the above matrix (the block labeled by j) further decomposes 
into 2"+"°~^ identical blocks each of which has size 4 • 25 x 4 • 25. Each of these 100 x 100 blocks 
is a matrix that we have already encountered in Section 4, the matrix with entries given by (4.18). 
Lemma 1 characterizes the zero energy eigenvectors of this matrix. Applying Lemma 1, we get zero 
eigenvectors of (5.12) 



x,ye{0,l} 



{\xy){xy\a^b,) \z)\TZi) + {Q\xy){xy\a^bj) \z)\gi) 



+ (Q\xy){xy\a^b,) \z)\yi) + {V\xy){xy\a^b,) \z)\Bi) 



(5.16) 



Here the projector \xy){xy\ajbj acts nontrivially only on qubits aj and bj of the computational 
register and z is an (n + na)-bit string. Note that since \z) is a computational basis state, only 
one of the terms in the sum over x,y is nonzero; we have written the state in this way to ease 
understanding later on. Letting z range over all (n + na)-bit strings and j = 0, . . . , M — 1, the states 
(5.15) and (5.16) span the groundspace of (5.12). 
Now consider 

M-l M-1 
j=0 j=0 

The third term in (5.17) couples the ground states of (5.12). To solve for the zero energy states of 
(5.17), we compute the action of 

M-l 

E (5-18) 

within the groundspace of the first two terms. We now exhibit a basis for the ground space of (5.12) 
in which the operator (5.18) has a simple form. Define unitaries 

0° = I and O' = V,,^,b,^,U'-'Va,,,b,^,W-' . . . C/° 

for A; = 1, . . . , M — 1 and states 

|/C°(<A)) = |0)|/CO), \MH<t>)) = 0^\4>)\M^), \d{4>)) = WO^mc^), (5.19) 

and 



x,ye{0,l} 



{\xy){xy\a^b,) WO^mni) + {Q\xy){xy\a^b,) UW^mGi) (5.20) 



+ (Q\ocy){xy\a,b,) U^O^cP)\yi) + {V\xy){xy\a^b,) U^O^imi) 



(5.21) 
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Figure 5.2. The Hamiltonian (5.18) is block diagonal when written in the basis 
(5.19)-(5.21). Each of the 2"^"" blocks corresponds to a different (n + na)-qubit 
state from an orthonormal basis A. The matrix for each block is the same, equal 
to \L where L is the Laplacian of this graph, which has 2>M + 1 vertices. 

Here we let \(j)) range over some (arbitrary) complete orthonormal basis A for the {n + Ua) qubit 
register and j = 0, ...,M - 1. The states (5.19)-(5.21) (with j = 0, ...,M - 1 and \4)) G A) 
are linearly independent superpositions of (5.15) and (5.16) and therefore span the groundspace of 
(5.12). Their normalizations are: 

(/CO(0)|/CO(0)) = 7, 
{M\<t^)\M^{<P)) = {C^mC-'{<P)) = 4, (5.22) 
(V^(.(0)|VM0))=43. 

The operator (5.18) acts on this basis in a simple way. It only connects states with the same 
|(/)) S A and is therefore block diagonal (with 2'^"^"" blocks). 

We compute the matrix elements within a block using equations (5.6) and (3.6). For example, 

M-l 

Y,{lC\mh\M\<^)) = {IC^{<P)\H'u\M'm 

j=0 

= {}C\4>)\ (I ® I ^ /13,4) |A^°(</')) = -\. 

Continuing in this manner, we compute all matrix elements of (5.18) between states (5.19)-(5.21). 
The resulting matrix is the same for each \(f)) and is equal to |L where L is the Laplacian"^ of the 
graph in Figure 5.2. The Laplacian matrix of a connected graph has a unique eigenvector with 
eigenvalue zero: the all ones vector. This fact means that for each £ A there is a unique zero 
energy state of (5.17) given by the uniform superposition 

/ M-i \ 

|Hist(<^)) = ^=F^=^ + Yl + + ' (5-23) 



i=o 



where we used (5.22) to compute the normalization. Letting range over all states in the basis A 
we get a spanning basis for the groundspace of (5.17). Moreover, we claim that every state in the 
groundspace of (5.17) is of the form 

|Hist(V')) 

^Recall that the Laplacian matrix of a simple graph with vertex set V and edge set E is the \V\ x \ V\ matrix with 

i-1 ii{u,v)eE 
d{u) ii u = V 
otherwise 



where d{u) is the degree of vertex 



u. 
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for some (n + na)-qubit state \ip). This is because, for any two basis states £ A and complex 

numbers a, f3 

a|Hist((/>)) + /3|Hist((/>')) = |Hist(a0 + /3(/>')), 

which can be seen using the definitions (5.f 9)-(5.21). 

Now consider the conditions under which a state |Hist('(/')) in the groundspace of (5.17) also has 
zero energy for both Hmit and -fTendi the final two terms in (5.4). 

We have 

(Hist(V)|i/init|Hist(V^)) = (51^ E ® ® C<i\lC\^)) (5.24) 



i=l 

ria 



1 "a 

^— ^(V'Kc^iKCil ^ ^ c<i c<M\Ci)\c, 



(51M 

1 

4(51M + 7) 



where in the last line we used (3.9). This is equal to zero if and only if {ip) = |T^)|0)'^"''' for some 
n-qubit state \W). Similarly, 

(Hist(V')|i/end|Hist(^)) = 4(5i^^7) (V'l4 (I0)(0|n+i) Ux\^) , (5.25) 

which is zero if and only if the (n + l)th qubit of Ux\ip) is in the state |1) with certainty. We have 
therefore proven that Hx has a zero energy eigenstate if and only if there exists an ra— qubit state 
\W) satisfying 

I (l®" ® |0)(0|(„+i) [/x|Ty)|0)®""||^ = 0. (5.26) 

This establishes Theorem 1. 

5.3. Proof of Theorem 2 

We now consider the case where 

AF{Ux,\W))<\ for all \W). (5.27) 

By Theorem 1 we know that in this case Hx has no zero eigenvalues. Here we prove that its ground 
energy is Q (jg?) which gives us Theorem 2 since M = Q{g). 
We use a spectral bound due to Kitaev [1 !]. Write 

for the smallest nonzero eigenvalue of a finite-dimensional, positive semidefinite operator H. 

Lemma 2. [Kitaev's geometric Lemma. [ ], p. 14V H = Ha + Hb with Ha > and Hb > 0. 
Let S be the nuUspace of Ha and let Hb be the projector onto the nuUspace of Hb- Suppose H has 
no zero eigenvalues. Then 

^{H) > mm{^{HA), i{Hb)] ■ [l - V~c) , (5.28) 

where 

c= max {v\U.b\v)- (5.29) 

|t,)eS:(i>|i;> = l 
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Note that we use the notation H >0 to indicate that all eigenvalues of a matrix H are real and 
nonnegative. 

Write Hx = Ha + Hb, with 

M-l 
j=0 

Hb = -f^init + -f^end- 

We use Lemma 2 to lower bound ^{Hx) which is equal to the ground energy of Hx- 

To apply Lemma 2, we need lower bounds on 7(i?A) and ^{Hb)- To bound ^{Hb) we use 
equations (3.37) and (3.36), which say that the operators 

C<i (g) C<i and C>(9m+3) C'>(9Af+3) 

are diagonal in the computational basis. Looking at the expressions for -ffinit and -ffend from (5.5), 
we see that Hb is a sum of projectors diagonal in the computational basis and hence "f{HB) > 1- 
We prove the following lower bound on j{Ha) in Appendix C: 



Lemma 3. 

(AI-l 

We use these bounds in (5.28) to obtain 



l{Hx) > n -{l-Vc), (5.30) 

with c from (5.29). 

We now upper bound c. Write Hinit and Hend for the projectors onto the zero eigenspaces of Hnit 
and Hcnd respectively. We have 

Hinit = (1®" ® |0)(0|®"») C<i ® C<i + I (1 - C<i C<i), (5.31) 

Ilend = |1)(1U+1 C>9M+3 O C>qm+3 + I (1 - C>qm+3 C>qm+3) ■ (5.32) 

Since these two projectors are both diagonal in the computational basis, is simply 

ninit ■ Hend- 

Recall from Section 5.2 that every state in the nullspace of Hj^ is of the form |Hist(V')) for some 
(n + na)-qubit state \ip). Thus 

c= max (Hist(V')lninit • nend|Hist(V')) 

W ■■ (V'IV'>=i 

< max (Hist(V')|ninit|Hist(V'))5 • (Hist(V')|nend|Hist(V'))5 (5.33) 

W ■■ {'4>\'4>)='^ 

by the Cauchy-Schwarz inequality. Using equations (5.23), (5.31) and (5.32) we compute 
(Hist(^)|ni,t|Hist(^)) = J^^^^^m^^mon) + 1 - ,^,,M + ,y 
(Hist(V^)lnendlHist(V^)) = 4(5ij^ + 7) (V'l4|l)aU+i^x|V^) + 1 - ^r^^M + iy 

Write 
where 

l^i) = 1 |o)(o|®""|v), |V'2> = (1 - 1 ® |o)(o|«"'") |v>. 
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(Hist(V')lninitlHist(V)) = 1 



1 



(1-/) 



4(51M + 7) 

Furthermore, \tpi) is proportional to a state of the form |VF)|0)®""' and so 



{iJi\u],\i){i\n+iUx\i^i) < liHi^i) = If 



by equation (5.27). Hence 
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(5.34) 



|[/i|l)(l|„+lf/x|V) < ^/+(V2|f/],|l)(l|n+lf/x|^2)+2 {4^i\Uj,\l){lUlUx\i^2) 
< ^/ + (1 - /) + 2 ((V'l|t/i|l)(l|n+lt/x|^l>(V'2|V'2)) ' 

<l4/ + 27i^. 



Plugging equations (5.34) and (5.35) into (5.33) gives 

1 



c < max 1 , 

~0</<iV 4(51M + 7) 



(1-/) 



1 



4(51M + 7) (s-^ 3'^^'^ 



< max 1 

o</<i \ 



1 



1 



4 (51M + 7) ( ^ 3^ Vs-^ ^ 16 (51M + 7)^ 3 



Now using the fact that 



min ( 1 - -/ - 2\ -/ (1 - /) I = 0.23 •••>-, 

0</<i I 3-' y 3-' ^ ■'^ - 5' 



(5.35) 



we get 



c < 1^1 

< 1 - 



1 



1 1 

+ 



1 

2\ 2 



4(51M + 7) 5 16(51M + 7)2 3 

11 11 

+ 



4(51M + 7) 10 16(51M + 7)" 3 



(using \/l + X < 1 + f ). Plugging this into equation (5.30) gives 



(± , 



which completes the proof. 
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Appendix A. Quantum 3-SAT is contained in QMAi 

In this Section we show that quantum 3-SAT is contained in QMAi. Bravyi gave a protocol that 
shows that quantum A;-SAT is contained in QMAi (for all constant k) but there is an error in the 
proof of Lemma 5 of that paper (on which the result relies) [-1]. Bravyi's proof can be patched up, 
but this requires some small modifications to the original definitions of QMAi and quantum /c-SAT 
[1]. Specifically, Bravyi's proof is valid with the definition of QMAi given in Definition 2 and under 
a condition on the set of allowed projectors which may appear in an instance of quantum /c-SAT 
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[1]. Here we give a self-contained proof (following Bravyi [ ]) that quantum 3-SAT is contained in 
QMAi, with the definitions given in Section 2. 

To show that quantum 3-SAT is in QMAi we provide a verification procedure that uses ancillae 
prepared in the state |0), measurements in the computational basis, as well as operations controlled 
on the measurement outcomes. All gates are from the set Q (2.2). 

As discussed in Section 2, such a verification procedure can be efficiently converted into a QMAi 
verification procedure which uses only one measurement in the computational basis (the final mea- 
surement which determines acceptance). 

Consider the following simple verification procedure. Given an instance of quantum 3-SAT spec- 
ified as a collection {Ilj : z = 1, . . . , r} of projectors and a witness state \ W), Arthur first chooses a 
random integer j G {1, . . . ,r}. Note that using gates from Q, Arthur can make the random choice 
very close to uniformly distributed. For example he can choose j so that 

Pr[j = i] = ^ + (r2-^) 

for each i G {1, . . . ,r}. (To do this he can prepare r ancillae in the state |0)®'', apply Hadamard 
gates to each of them, and then measure each in the computational basis. He can divide the 2*" 
possible measurement outcomes into r sets z = 1, . . . , r, where an outcome from the ith set occurs 
with probability pi = ^ + and |ej| < r2~^ .) Having chosen j randomly in this way, Arthur 
measures the eigenvalue of the projector Hj in the state \ W) and outputs "yes" if and only if the 
measurement outcome is zero. For a yes instance, Merlin can give Arthur a witness state \ W) which 
is in the nullspace of each of the projectors Hj, and in this case Arthur outputs "yes" with certainty. 
On the other hand, for a no instance, any state \ W) satisfies 

r 

Y,{w\^i\w) > 1, 

1=1 

and so the probability that Arthur's measurement outcome is 1 is given by 

r 1 *" 

^ Pr[j = i] {W\U,\W) =- Y,{W\Ui\W) + O {r^2-^) 
1=1 1=1 

>l + 0(r22-'-). 

The probability that Arthur outputs "yes" in this case is upper bounded by 

1 _ 1 + O (^22-r) _ 

This protocol has perfect completeness, and soundness 1 — ^ + O (r^2~''). The soundness can be 
amplified (for example using the protocol described in reference [ ] ) to achieve the desired constant 
I which appears in our definition of QMAi. 

The above verification procedure requires that we can exactly measure any projector H G P 
using the gate set Q. As discussed below, this is only true for projectors satisfying condition 1. in 
Definition 3. In the following, we describe a modification of this verification procedure that weakens 
this requirement and which proves that quantum 3-SAT (with projectors from V) is contained in 
QMAi. 

First, let us show that an exact measurement can be performed for projectors H £ V satisfying 
condition 1 in Definition 3. For such projectors the controlled unitary 

[/n = n®a^ + (l-n)®I (A.l) 

is efficiently decomposable as sequences of {H, T, CNOT} gates (possibly using an ancilla initialized 
in the state |0)). This follows from reference [Ji^], in which it is shown that such a decomposition 
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can be efficiently computed for any 3-local projector with matrix elements (in the computational 
basis) of the form 

^ (^a + ib + V2c + iV2d}j (A. 2) 

for any n-independent constant s £ {2, 3,4,...} and integers a, b, c, d. Note that a measurement of 
n in a state is performed by applying Uji to |V')|0) and then measuring the last qubit in the 
computational basis. 

For projectors satisfying condition 2 it is possible to implement a weaker type of exact mea- 
surement that we call an "exact heralded measurement" . This is a probabilistic implementation of 
the controlled unitary (A.l) using the gate set Q, where the success or failure of the procedure is 
determined by the outcome of a single qubit measurement of an ancilla in the computational basis. 
The measurement is "heralded" because, after using the algorithm, we are told (via the state of the 
ancilla qubit) whether or not it succeeded. In the next Section we provide an exact heralded mea- 
surement algorithm that can be run using any number of steps m and achieves success probability 
1-0(4-™). 

The following modification of the above verification procedure shows that quantum 3-SAT is 
contained in QMAi (with the definitions given in Section 2). Arthur first randomly chooses an 
integer j G {1, . . . , r} as described above. If Hj is a projector satisfying condition 1 from Definition 
3 then he measures the projector using the exact measurement procedure described above, and 
outputs "yes" if and only if the measurement outcome is zero. On the other hand, if Ilj satisfies 
condition 2, then Arthur uses the exact heralded measurement algorithm with m = r steps. The 
probability that the measurement succeeds is 1 — O (4"^). In this case Arthur outputs "yes" if either 
a) the heralded algorithm fails or b) the measurement succeeds and the measurement outcome is 0. 
This protocol has perfect completeness, and the very small failure probability does not appreciably 
affect the soundness, which can still be amplified to the constant |. 

A.l. An exact heralded measurement 

Consider a 3-local projector of the form 

n = [/ [^l\\m - Vf 1001)) (\/|^000| - y|(001|) U\ (A.3) 

where C7 is a 3-qubit unitary with matrix elements of the form (2.3). In this Section we describe 
an algorithm which uses gates from the set T, CNOT}, ancillae prepared in the state |0), and 
measurements in the computational basis. The algorithm takes as input a four-qubit state |a) and 
outputs a single classical bit which indicates either "success" or "failure" along with a four-qubit 
state 1/3). If the algorithm outputs "success" then 

1/3) = Uu\a) 

and we have successfully and exactly implemented Un (from (A.l)). The algorithm we describe 
can be performed using any number of steps m G {1,2,3,...} and uses 0(m) gates along with 
0(m) ancillae and measurements in the computational basis. The success probability of the m-step 
algorithm is 

Psuccess('^) — 1 

We thank John Watrous for his help with developing this algorithm. 

Our algorithm is based on the circuit in Figure A.l which implements Uu. In the Figure, the 
four-qubit controlled unitary is 

|001)(001|(^ct'' + (I- |001)(001|) (g)I 
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u 



R 



R 



■a" 



-0- 



Figure A.l. A circuit that implements the controhed unitary Uu from equation 
(A.l) for a projector of the form (A. 3). Here the controlled operation applies 
to the fourth qubit if the first three qubits are in the state |001). The single qubit 
unitary R is given by (A. 4). 



R 



(A.4) 



and 

J_( V2 -I 

Note that, with the exception of the single-qubit R gates, all gates which appear in the circuit in 
Figure A.l can be expressed as products of H,T and CNOT gates (their matrix elements are of 
the form (2.3)). To implement each of the R gates, we use a heralded m-step procedure described 
below. Each R gate succeeds with probability 

1 

4m ■ 

The overall probability that we apply the circuit in Figure A.l is then (l — 47s:) ^• 

An m-step algorithm to implement R 

Consider the following 2-qubit unitary 



A 



( V2 
1 
1 

V 



-1 


1 












1 


1 



1 

-1 

-^/2 J 



Since each of its matrix elements is of the form (A. 2), A can be implemented exactly using the gate 
set {i?, T, CNOT} using one ancilla initialized in the |0) state [10]. That is to say, the results of 
reference [10] can be used to obtain a sequence of T and CNOT gates implementing a 3-qubit 
unitary U such that 

u\Qm = \Q) {Am 

for all 2-qubit states Let |(^) be a one-qubit state that we wish to apply R to. The m-step 
algorithm consists of applying the following procedure until either a) the algorithm terminates or 
b) step 2 has been repeated m times. In case a) the algorithm succeeds and in case b) it fails. 

(1) Apply U to the state 

|OO)|0) (A.5) 

to get 

u\mm = \^) (^|o)|<A)). 

(2) Measure the second qubit in the computational basis to obtain an outcome z G {0,1}. 
Looking at the top left 2x2 submatrix of A we see that with probability 

\m{Q\®i)A\m)\? = \ 



we get the outcome z 



P 

0. In this case the post-measurement state is 
|OO)i?|0). 
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In this case we are done-the unitary R has been apphed to the state \cp). On the other 
hand, if we get the outcome z = 1 then the post-measurement state is 

mm- 

We then discard the two ancihas, adjoin two new ones in the state |0) and start over from 
step 1. 

The algorithm fails if in each of the m repetitions of step 2 we measure z = 1. This occurs with 
probability 

Appendix B. Supplementary Figures 
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Figure B.l. The clock states |Ci), IC2), IC3), IC4) for = 4, expanded in the 
computational basis. These states are defined through equation (3.35). We use the 
shorthand r = l/\/2 and h = 1/2. 



QUANTUM 3-SAT IS QMAi-COMPLETE 



32 



By 



By 



I I I 



(a) |0)(0U 



(b) 



Figure B.2. The terms h^^i^Bi,) ®1 and /i45(c7^) from -^horizontal (4-13) and -^vertical 
(4.14) couple the states \'Tlid) ,\Qo) ,\yo) ,\Bq) or |7^i), |C/i), depending on 

the state of the control qubit. a) When the control qubit is |0), the state |0)|y)|7^o) 
is coupled to |0)i?|y)|^o); which is coupled to |0)(T^i?|y)|i3o) which is coupled to 
|0)-Btcr^B|y)|3'o)- b) When the control qubit is |1), the state |l)|y)|7^l) is coupled 
|l)|y)<7^|^i) which is coupled to \l)B(7^\y)\Bi) which is coupled to |l)|y)cj^i?(T^|3^i). 

Appendix C. Proof of Lemma 3 
In this Section we prove Lemma 3. We build up the Hamiltonian 

M-l M-l 
3=0 i=0 

a few terms at a time, lower-bounding its smallest nonzero eigenvalue at every step. The main 
technical tools we use are three Corollaries of Kitaev's geometric Lemma [ I I] which we prove below. 
In this Section we will make use of, and refer repeatedly to, the details of the clock construction 
from Section 3.3. 



C.l. Notation and spectral bounds 

Let us start by establishing some notation. Recall that, if H is positive semidefinite and not 
identically zero, we write 

for its smallest nonzero eigenvalue. If i7 is a Hamitonian acting on a Hilbert space % and S" is a 
subspace of H , write 

H\s 

for the restriction of H to states in S (it can be written as a dim(S') x dim(5') matrix). In this 
paper all Hilbert spaces and operators are finite-dimensional. 

The following Corollary is a variant of Lemma 2 which (unlike the Lemma) can be used when H 
has a nonempty nullspace. 

Corollary 1. Let H = Ha + Hb where Ha > and Hb > each have nonempty nuUspaces. Let 
r be the subspace of states in the nullspace of Ha that are orthogonal to the nullspace of H , and let 
Hb be the projector onto the nullspace of Hb- Then 



-i{H) > mm{^ {H a), i{Hb)} ■ (l - Vd^ 
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where 

d = \\IlB\r\\ = max (v\IIb\v). 

\v)er:(v\v) = l 

Proof. Let P be the projector onto the nullspace of H (if it is empty, set P = 0). Define 

H'a = Ha + i{Ha) ■ P. 

Note that every state in the nuhspace of H is also in the nullspace of Ha and so [P, Ha\ = 0. This 
implies that 7(-f^^) = j{Ha)- Noting that H' = H'^ + Hb has no zero eigenvalues, we apply Lemma 
2 to get 

-f{H) > mmMHA),l{HB)} ■ {l - V~c) , 

where 

c = IIIIbIs'II 

and S' is the groundspace of H'^. Noting that S' = T (and hence c = d) completes the proof. □ 

We derive two additional Corollaries by upper bounding the parameter d in two different ways. 
Let S be the nullspace of Ha, and suppose that Hb\s is not the zero matrix. Note that 

i{Hb\s) = min {v\Hb\v), 

\v)<:iT:{v\v)=l 

since the zero eigenspace of Hb\s is equal to the nullspace of H. Accordingly, for any normalized 
state \v) S r, 

i{Hb\s) < {v\Hb\v) < {v\ (1 - Ub) \v) \\Hb\\ , 

and so 

W^bW 

Using this bound in Corollary 1 and using the fact that 1 — \/l — x > | for x £ [0, 1] gives the 
following Corollary. 

Corollary 2. Let H = Ha + Hb where Ha > and Hb > each have nonempty nuUspaces. Write 
S for the nullspace of Ha and suppose Hb\s not the zero matrix. Then 

7(F) > min{7(F^),7(Fi?)} • Y^^' 

We now derive a different bound on d. For any normalized state \v) G F, 

^{Hb\s) < {v\{1-Ub)Hb\v) < {{v\{l-UB)\v){v\H],\v)y' 
using the Cauchy-Schwarz inequality. Squaring both sides and rearranging, we get 

{v\H^\v) r 



where 



F= max {vlHllv). (C.l) 

|i>>e5:(i;|r.>=l 



Since this holds for all normalized \v) G F, we get 

F 

Here we need F ^ 0, which is true whenever Hb\s is not the zero matrix. Using this bound in 
Corollary 1 gives 
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Corollary 3. Let H = Ha + Hb where Ha > and Hb > each have nonempty nullspaces. Write 
S for the nuUspace of Ha and suppose Hb\s not the zero matrix. Then 

^{H) > mm{7(^A),7(^B)} • 

with F defined in (C.l). 

C.2. Applying the spectral bounds 

We begin by proving a lower bound on the smallest nonzero eigenvalue of the Hamiltonian -f^f^ipiL 
from (3.10). 

Lemma 4. 

7 (^triplet j > 

Proof. Recall that 

^t?£et = Hi+H2 + H3 

with Hi, H2 and H3 given in (3.11), (3.12), (3.13). We first show that 7 {Hi + H2) is lower bounded 
by a constant. Let 

2N-2 2N-2 

Ha = {Hi + H2) — ^ \9 ){6 |3i+l,3j+2,3j+3, Hb = ^ 16* ){6 |3j+l,3i+2,3i+3 

i=0 i=0 

and note (by looking at equations (3.11), (3.12)) that Ha is diagonal in the computational basis and 
is a sum of projectors. Because of this, its eigenvalues are nonnegative integers and so 7 {Ha) > 1. We 
now construct a convenient basis for the ground state subspace of Ha. Recall that the groundspace 
of Hi + H2 is spanned by states {\i)} and {|A;)} from equations (3.15)-(3.16) and (3.17). We can 
associate a set of ground states of Ha with each of these states. For example, look at 

|3) = |(9+)|110)|000)...|000). 

Note that |3) is a zero energy ground state of Ha, but so is 

|6'-)|110)|000) . . . |000). 

Similarly, for each of the states \i) for i G {1, . . . , 4N — 2}, we can construct additional zero energy 
ground states of Ha by replacing any subset of the l^"*") states which appear in the tensor product by 
\9~) states. Likewise, we obtain 2'^ groundstates of Ha from each state \k) for k G {1, . . . , 2N — 2} 
by making such replacements. Taking all of the states constructed in this way, we get a spanning 
set of ground states of Ha- This basis for the groundspace of Ha is convenient because every basis 
state is also an eigenstate of Hb with an integer eigenvalue. This shows that the projector Ua onto 
the groundspace of Ha commutes with Hb and hence also with Ha + Hb- Any eigenstate \w) of 
Ha + Hb satisfying Hal if) = {w) has an integer eigenvalue as discussed above. On the other hand, 
an eigenstate \w') with nalif') = has energy at least ^{Ha) = 1 since Hb > 0. Therefore, 

j{Hi + H2)=-f{Ha + Hb)>l. (C.2) 
We now use Corollary 3 with Ha = Hi + H2 and Hb = H^ to bound the smallest nonzero 
eigenvalue of -fftrii^iif note that H3, is a sum of commuting projectors and therefore 7(-ff3) = 1. 

Looking at (3.18), and writing S for the groundspace of Hi + H2, we see that 7 (^^3!^) = g. Let us 
now look at the second power of H3: 



Hi = Hs + Y^ |7)(7|3i+3,3i+4,3i+5 O |7)(7|3j+3,3i+4,3j+5, 
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noting that every state in the groundspace of Hi + H2 is annihilated by the second term in the 
above expression (one can easily verify this fact for each of the states \i) and \ k) defined in equations 
(3.15)-(3.16) and (3.17)). This implies that for all \v) £ S, 

{v\Hi\v) = {v\H3\v), 

and hence 

F = m.a:!<.{v\Hn\v) = max{v\H3\v) = \\Hb\s\\ = ~) 
\v)es \v)gs 3 

where we used (3.18) to compute llff^lsll- Now applying Corollary 3 and using (C.2) we get 

113 1 



7 



(^^5^-2-36 ^-48- ^^-^^ 

□ 



Next, we prove a lower bound on the smallest nonzero eigenvalue of H^^^^^ from (3.28). 



Lemma 5. 



7(<l)> ' 



2048 

Proof. We first bound 



where h!.% and H.,^^ are defined in equations (3.29) and (3.31). We will use Corollary 3 with 

Note that the two terms in act on different registers and therefore commute. The second term 
has nonnegative integer eigenvalues so 



liHA) > 7(i^^ -St ® I) > ^ 



by Lemma 4. Hb is a sum of commuting projectors and therefore satisfies ^{Hb) = 1- The zero 
energy groundspace S of Ha is spanned by states 

= \cj)\l_^^_^) (C.4) 

i N-i 

for i = 0, . . . , N and j = 1, . . . 2N, where {|cj)} are the ground states of H^^-^^^^ given in (3.19)- 
(3.21). Using equations (3.23) and (3.24), we see that Hb\s is diagonal in the basis (C.4), with 
liHBls) = \- Now consider H^. Noting that 

qjqk\cm) = whenever 3 ^k, 

and = qj, we get 



2^-1 2 



Hl\sij)= (?i»|l)(l|i+ ^ (|0)(0|^ij +|l)(l|^ij^J +q2N 

i=2 



N 



Thus H^\s is diagonal in the basis (C.4) and we can evaluate its diagonal matrix elements using 
the above expression. The largest such matrix element is 



l-f^lls'll - 1- 



Applying Corollary 3 with F = 1 gives 
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TV 

Ha = i^t?£et ® I + I €D Hi% + i^sync, = ^ 52.-1,2^(0, 

i=l 

SO that Ha + Hb = H^ciocV Recall the basis for the groundspace of Ha given by the states \ej) from 
(3.32). The restriction of Hb to the subspace 5 spanned by these states is given in (3.33). Looking 
at this expression and making use of the fact that /3j > \ for all j, we see that ^{Hb\s) ^ \- 
Looking at (3.25) we see that the summands in Hb are mutually commuting projectors. Since it is 
also the case that fi'2i-i,2i(o'f )|efc) = whenever k ^ {2i — 1, 2i}, we see that 

92j-i,2j{(^j)g2i-i,2i{(^i)\ek) = Sijg2i-i,2i{(^i)\ek), 

and hence 

Hb\s = Hb\s- 

This means 

using (3.33) and the fact that /32j-i < \- Now applying Corollary 3 we get 



rWV 1113 1 



clock; - 2 384 4 2 2048' 

□ 

Now we are ready to prove a bound on the smallest nonzero eigenvalue of H^^ from (5.3). Recall 
that this Hamiltonian acts on the Hilbert space of two clock registers, and its ground states are 
represented in Figure 5.1. 

Lemma 6. 



Proof. Looking at equations (5.3) and (4.2), write 



-f^dilfi - Ha + HfS + H^, 
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where 



M-1 

HfS = C'<(9A./+i) (8) C>(9^+3) + ^ (C<(9A;+1) ® C>(9fc+3) + C<(9fc+4) (g) C>(9fc+6)) 

fc=0 
M-1 

+ c> 

(9M+3) "S?) C'<(9M+i) + ^ (C'>{9fc+3) {9fc+l) {9fc+6) ® C'<(9fc+4)) , 

fc=0 

Af-1 

H-y = ^ (/l9fe+i,9fc+2 fg C'<(9fc4.2) + ^(9fc+2),(9fc+3) "X" C'>(9fc_,_2)) 
fc=0 
A/-1 

+ ^ (C<(9fc+2) ® ^9fc+l,9fc+2 + C'>(9fc+2) ® ^(9fc+2),(9fc+3)) 
fc=0 

+ ^ (/i9fc+4,9fc+5 "S?) C<(9jt+5) + /l(9fc+5)^(9fc+6) "SD C'>(9fc+5)) 



fc=0 
M-1 

+ ^ (C<(9fc+5) ® ^9fc+4,9fc+5 + C'>(9fc+5) ® ^(9A:+5),(9fc+6)) 
fc=0 

+ hgM+l,9M+2 (g C'<(9A,/+2) + ^{9M+2),(9M+3) "^i C'>(9a,/+2) 
+ C'<(9M+2) ^3 ^9Af+l,9M+2 + C'>(9m+2) "X" /i(9A/+2),(9A'/+3) • 

Recall that the ground state subspace Sa of Ha is spanned by the states 

{\Ci)\Cj) : £ [9M + 3]»[9M + 3]}. (C.5) 

Hj3 satisfies ji^H/^) > 1 since it is a sum of commuting projectors. Applying Corollary 1 and using 
the result of Lemma 5 which bounds 7 (Ha), we get 

-/{Ha + Hp) > 2^-(l-Vd), (C.6) 

d = l|n,3|r||, 

where is the projector onto the groundspace of -fT/j, and T is the subspace of groundstates of 
Ha that are orthogonal to the groundspace of Ha + -ff/?- Looking at the form of Hjj we see that 
a spanning set of basis vectors for the groundspace of Ha + Hp is given by a subset of the basis 
vectors (C.5). The set F is the complement of this subset, and in particular can be written as 

r = sp8.n{\Ci)\Cj):{i,j)eP} (C.7) 

for some set P C [9M + 3] (8) [9M + 3] (we will not need an explicit expression for P) . 

We now consider n^|r in the basis (C.7) and bound the norm of the resulting matrix. Recall from 
(3.36) and (3.37) that the operators C<i and C>i act only on the last 9M + 3 qubits of the clock 
register, are mutually commuting, and are diagonal in the computational basis for all i E [9M + 3]. 
This implies that Up has the form 

Ufs= I^{\zi){zi\)(i$l0{\z2){z2\), (C.8) 

where the two identity operators act on the first 6(9M + 3) — 3 qubits of the two clock registers and 
where A C{0, ^ j9M+3 q£ pairs of (9M + 3)-bit strings (we will not require an 

explicit expression for A). 
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Now look at the expression for the states |Cj) from equation (3.35) with N = 9M + 3 (or inspect 
Figure B.l) and note that 

{Ci\ (I (g> \z){z\) \Cj) = whenever i / j, 

where the tensor product separates the first 6A^ — 3 qubits from the last A'^ and where z is any A'^-bit 
string. Using this fact and (C.8) we get 

{Cj2\{Ci^\Ill3\Ci^)\Cj^) = whenever (hji) / (12,^2)- 

We evaluate the diagonal matrix elements of 11^ using (3.35): 

{Cj\{Ci\U/B\Ci)\Cj) = - ((5(u(i_i),u(j-i))e^ + ^(«(i),«(j-i))e^ + ^{u{i~i),u{j))(^A + <5(«(j-i),M(j-i))G^) > 

where u{i) is the unary representation of i with bits (the bit string with i ones followed by — i 
zeros), and S(^x,y)&A is equal to one if {x,y) £ A and zero otherwise. Since n^|r is diagonal in this 
basis we have 

||n^|r||= max(C,Ka|n;3|a)|C7,) 
(«j)eP 

" r™?i^o A ('^(«(i-l),«(i-l))e^ + '^(«(i),«(j-l))ey4 + S(uii-l)MmA + '5(«(i-l),n{j-l))6^) • 

We know that ||n^|r|| is not equal to 1 since the space F does not contain any states which have 
zero energy for Hfj (by definition). Looking at the above expression for this quantity we see that 
this implies 

l|n,|r|| < l 

Now using this bound in (C.6) we get 

For the final step in the proof of Lemma 6, we use Corollary 2 with Ha = H^ + Hp and Hb = H^. 
As discussed above, the ground space of Ha is spanned by the states \Ci)\Cj) with (i, j) ^ P. H^ is 
block-diagonal in this basis, with a block for each connected component of the graph in Figure 5.L 
From this Figure we also see that blocks have maximum size equal to 7. Within each block there 
is a zero energy state given by the uniform superposition over states \Ci)\Cj) where are in 

the associated connected component. There are also higher energy states. The lowest nonzero 
eigenvalue of H^ within the subspace spanned by ground states of Ha + Hj3 is equal to the smallest 
nonzero eigenvalue for one of these constant-size blocks, which is a constant independent of M. The 
norm of Hb is upper bounded as = 0{M) since it is a sum of 0{M) projectors. Furthermore, 

looking at equations (3.36), (3.37) and (3.39), we see that 

{C<j}, {C>k}, and 

are mutually commuting. Thus, Hb is a sum of commuting projectors which implies that its 
eigenvalues are integers, and in particular j{Hb) > 1. Now applying Corollary 2 we get 

j{Ha + Hp + H^) = n(^j-^ 

which completes the proof. □ 

The next Lemma bounds the smallest nonzero eigenvalue of X^^q^ H-jj where H^ is defined in 
(5.6). The role of this Hamiltonian is to check the application of single-qubit gates within the 
ground state subspace of H^f^^. 
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Lemma 7. 




nil). 



Proof. Recall that the operator 

M-l M-1 

^^U=Y1 {^9j+3,9j+4{U^) 01 + 1^1® /l9j+3,9i+4) (C.9) 
j=0 j=0 

acts on a Hilbert space with an (n + na)-qubit computational register and two clock registers 

where A'^ = 9M + 3 is the number of states for each clock. Each is either the Hadamard gate, 
the T gate, or the identity gate acting on one of the qubits of the computational register. In (C.9), 
/i9j+3_9j_i_4([/-') acts nontrivially on a single qubit of the computational register as well as qubits 
6(9j + 3) — 1 and 6(9j + 3) of the first clock register (to see this, look at (3.39)). 
Define operators 

Pi,i+1 = |01)(01|6*-l,6i + |10)(10|6i-l,6* (C.IO) 

for i = 1, . . . , A^ — 1 which act on a single clock register. Note that we can simultaneously diagonalize 
(C.9) along with 

{I » P9j+3,9j+4 ® 1} and {I(g)I(S)h9j+3,9j+4} (Cll) 

for j = 0,...,M — 1, since all of these operators are mutually commuting. We choose to work in a 
basis of simultaneous eigenvectors for these operators. 

Any eigenstate |^) of (C.9), which is also a zero eigenvector of 

I®P9,+3,9j+4®II, (C.12) 

satisfies 

(/l9i+3,9i+4(t/^')»l) IV') =0. (C.13) 

Likewise, there are eigenstates \ip') of (C.9) which satisfy 

(I®IC3/l9i+3,9i+4)|^') =0. (C.14) 

We are working in a basis where each eigenstate of (C.9) has a set of simultaneous eigenvalues 
for the projectors from (C.ll). An eigenstate \k) in this basis has eigenvalue or 1 for each of 
these projectors. Let us fix \k) and consider the projectors which have eigenvalue zero. Looking at 
equations (C.13) and (C.14) we see that for each such projector there is a corresponding term in 
(C.9) that annihilates \k). Let us now focus our attention on the other terms in (C.9). Specifically, 
for a given eigenstate |k) of (C.9), consider the terms 

/i9i+3,9i+4(f/^) Ol, 
where (I (X" i-*9j+3,9j+4 (X" I) |k) = \k), and the terms 

I(g)I(g)/l9A:+3,9A:+4, 

where (I (g) I iS" ^9^+3,9^+4) |^) = |^)- We'll call these terms the remaining operators for the state \k) 
(they remain after removing some terms in equation (C.9) which have eigenvalue zero). 

We classify the eigenstates of (C.9) into two types. The first type of eigenstate is defined by 
the property that all of its remaining operators commute. Note that an eigenstate of (C.9) is 
also an eigenstate of the sum of its remaining operators. In this case the remaining operators 
are commuting projectors, and so each eigenvalue of (C.9) associated with such an eigenstate is a 
nonnegative integer. 
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The second type of eigenstate has at least two remaining operators which do not commute. 
Looking at (C.9) we see that these two operators must be 

h9j+3,9j+4.{U^), and h9k+3,9k+4:iU^), 

for some j and k with [W,U^] / 0. Recall that both and U'' are either Hadamard, T or the 
identity acting on one of the qubits. The condition that [U^,U^] 7^ means that the two gates 
must act on the same qubit, and that one of them is the Hadamard gate and the other is the T 
gate. We now show that any eigenstate of this second type has eigenvalue e bounded below by a 
positive constant. Since each term in (C.9) is a projector, we have 

e > min {ip\hgj+s^gj+4{W) + hgk+3,9k+4:{U'')\^p) , (C.15) 
where S is the subspace of states satisfying 

(I ® P9j+3,9j+4 ® I) 1^) = IV') and (I (g) P9fc+3,9fc+4 ® I) |V) = IV')- 

For states \^) £ S, the Hamiltonian 

hgj+3,9j+4{U^) + /l9fc+3,9fc+4(f/') (C.16) 

acts nontrivially within an 8-dimensional space that is the tensor product of three 2-dimensional 
spaces. These are: the states of the single computational qubit on which the unitaries and 
act, the states |01), |10) on qubits 6(9j + 3) — 1, 6(9j + 3) of the first clock register, and the states 
|01), |10) on qubits 6(9A; + 3) — 1, 6(9A; + 3) of the first clock register (note j k). Identifying this 
8-dimensional space with the space of 3 qubits, we can write the action of (C.16) as the Hamiltonian 



1(8)101-^0 |1)(0| 01-^0 |1)(0| 01) (C.17) 

+^ (^i0i0i-r"f®i® |i)(o| -r®i® |o)(i| 

Here we used the fact that and C/^ are the Hadamard and T gates respectively. Equation (C.15) 
says that e is lower bounded by the smallest eigenvalue of this operator, which is a positive constant 
equal to 0.00937 .... 

Let us now summarize what we have shown regarding the eigenstates of (C.9). We have classified 
each eigenstate as either type 1 or type 2 according to the form of its remaining operators. We 
showed that every eigenstate of the first type has a nonnegative integer eigenvalue, and that every 
eigenstate of the second type has eigenvalue at least 0.00937 .... From this we see that 




is at least 0.00937 . . . , which completes the proof. □ 

We now prove a lower bound on the smallest nonzero eigenvalue of X^^o^ where Hy is defined 
in (5.7). The role of this Hamiltonian is to check each of the M applications of the two-qubit gate 
V within the ground state subspace of -f^^^g- 

Lemma 8. 

/ M-l \ 

" ■ =n{i). 
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Proof. We use a similar strategy to that used in Lemma 7. First, we define a set of mutually 
commuting projectors which also commute with 

M-l M-1 

^ (-f^horizontal + ^vertical) • (C.18) 

The specific set of projectors reflects the structure of the terms appearing in (C.18) (look at equations 
(5.8) and (5.9)). In particular, consider the set of projectors 



I (g) /l9j+6,9j+7 O I 


I (g I (g /l9j4.6,9j+7 


(C.19) 


I (g) /l9j+6,9i+7 ^ C'>9j+10 


I (g C>9j+io (g /l9j+6,9i+7 


(C.20) 


I (g> /l9j+8,9j+9 ^ C'<9i+6 


I (g C<9j+6 (g /l9j+8,9j+9 


(C.21) 


I (g) /l9j+9,9i+10 <g I 


I (g I (g /l9j+9,9j+io 


(C.22) 


^5 ^9i+9,9i+10 "SD C>9j+io 


I (g C>9j+io <g /l9j+9,9j+io 


(C.23) 


I (g) ^9j+8_9j_|_9 (g C>9j+io 


I (g C>9j+io (g /l9j+8,9i+9 


(C.24) 


I (g P9j+7,9j+8 (g I 


I (g I (g P9j+7,9j+8 


(C.25) 



for j = 0, . . . , M — 1, where Pi^i+i is defined in (C.IO). Recall that the three registers separated by 
tensor products are the (n + na)-qubit computational register, the first clock register and the second 
clock register. Using the definitions (3.39), (3.36) and (3.37) one can check that these projectors 
are mutually commuting and that they commute with (C.18). We can therefore simultaneously 
diagonalize (C.18) along with the projectors listed above. We choose to work in a basis of eigenstates 
of (C.18) in which all of these operators are diagonal. 

For a given eigenstate \k) of (C.18), each of the projectors in equations (C.19)-(C.25) can have 
eigenvalue either or 1. We defined the projectors above in such a way that, if one of them has 
eigenvalue zero then one of the terms in (C.18) annihilates For example, if 

(10^7,8^1)1'^) =0 

(this is the seventh projector from the top in the left column of equations (C.19)-(C.25) with j = 0), 
then 

(/l7,8(Sbo)®I)k> =0 

(this is the seventh term in (5.8) with j = 0). In this way, each of the 7 projectors on the left-hand 
(right-hand) column of equations (C.19)-(C.25) is associated with one of the 7 terms in -^horizontal 
{Hl^j.^-^^^^) . To see this, compare equations (C.19)-(C.25) with equations (5.8) and (5.9). Now let us 
fix an eigenstate \k) of (C.18), which has a specific set of eigenvalues for the projectors in equations 
(C.19)-(C.25). For each of the projectors (from the list (C.19)-(C.25) ) for which has eigenvalue 
1, consider the corresponding term from equations (5.8) and (5.9). We call these terms the remaining 
operators for \k) and we classify eigenstates into two types based on these terms. 

The first type of eigenstate has the property that all of its remaining operators commute. Any 
eigenvector of (C.18) of this type is an eigenvector of a sum of commuting projectors and therefore 
has an integer eigenvalue. Therefore, the lowest nonzero eigenvalue for this first type of eigenstate 
is at least 1. 

Now consider a second type of eigenstate where at least two of its remaining operators do not com- 
mute. Looking at equations (5.8) and (5.9) we see that possible pairs of noncommuting remaining 
operators are 

(1) : |l)(l|aj (g I (g /i9j+6,9i+7 and hQk+7,9k+8{Bbk) with Uj = bk (and hence j / k), or 

(2) : |0)(0|a^. (g /i9j+6,9j+7 (g I and hgk+7,9k+8iBbk) with aj = bk (and hence j / /c), or 

(3) : hgj+7^gj+s{Bbj) <gll and /i9fc+7,9A:+8(crfeJ with bk = bj (it may be that j = k). 
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We claim that any eigenstate \k) of (C.18) of this second type has eigenvalue bounded below by 
a positive constant. To see this, first suppose two of the remaining operators are of the form (1). 
For these to be remaining operators it must be the case that \k) is a +1 eigenvector of both 

I (g) I (g) /l9j+6,9i+7 and 1(^10 Pgk+7,9k+8- (C.26) 

The eigenvalue associated with this state is bounded below by the smallest eigenvalue of 

|l)(l|a, (gl® /l9i+6,9j+7 + /i9A:+7,9A:+8(-BfeJ (C.27) 

within the joint +1 eigenspace of the two projectors (C.26). Within this space, (C.27) acts non- 
trivially on an 4-dimensional space that is the tensor product of two dimensional spaces: the single 
qubit space for qubit aj = bj of the computational register and the space spanned by the two basis 
states 1 01), 1 10) of qubits 6(9 j + 7) — 1 and 6(9 j + 7) of the second clock register. Within this space 
(C.27) has the form (identifying the 4-dimensional space with two qubits): 

(l(^I-B^ ^ |1)(0| -5® |0)(1| 

which has smallest eigenvalue ~ 0.076. Any eigenstate \k) which has two remaining operators of 
the form (1) has eigenvalue bounded below by this positive constant. In cases (2) and (3) we can 
follow the same steps (as in case (1) above) to lower bound the eigenvalue. In case (2) we bound it 
by the smallest eigenvalue of the 2-qubit operator 



\0){0\(g)I+^(l(g)I- ^ |1)(0| -B^\0){1\ 



(which is ~ 0.076) and in case (3) we get a lower bound from the smallest eigenvalue of the 3-qubit 
operator 

B^ (g) |1)(0| |0)(1| 0l) + ^ (I®I®I-cj^®l0 |1)(0| -cj^ ®I| |0)(1|) 

(it is also « 0.076). 

We have thus shown that any eigenstate (of (C.18)) of the first type has a nonnegative integer 
eigenvalue and any eigenstate of the second type has smallest eigenvalue bounded below by a positive 
constant. This completes the proof. □ 

We now add the two-qubit gate terms to I (g Hj^[^ and we lower bound the smallest nonzero 
eigenvalue of the resulting Hamiltonian. 

Lemma 9. 



j=0 



1 



Proof. We apply Corollary 2 with 



Ha = 1®H', 

M-l 

Hb = 

j=0 



(M) 
diag ' 



-3 

V 



However, we first need to understand the action of Hb on the groundspace S of H^- We showed in 
Section 5.1 that Hb\s, written in the unnormalized basis (5.11), is block diagonal. Of course, the 
matrix has the same block diagonal structure when written in a normalized basis. Furthermore, 
each nonzero block is identical, equal to a specific 100 x 100 matrix (independent of M or the 
number of qubits). The smallest nonzero eigenvalue of j{Hb\s) is therefore constant, equal to the 
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smallest nonzero eigenvalue of this matrix. Plugging this into Corollary 2 and using the facts that 
= 0{M), j{Ha) = ^ {jf) (from Lemma 6) and ^{Hb) = ^^(1) (from Lemma 8) we get 



A/-1 



1 



□ 



C.3. Proof of Lemma 3 



We are now ready to finish the proof of Lemma 3, the main result of this Appendix. We add in 

j 
u 



the single-qubit gate terms Hrj and we use the bound from Lemma 7. We prove 



M-l M~l V / 1 \ 

«i5 + E«^+E«i =«(i) 



7 



j=0 j=0 



Proof. Let 



M-l 



j=0 



and consider the action of Hb on the groundspace S of Ha- Recall the (unnormalized) basis for 
the groundspace of Ha given in equations (5.19) and (5.21), where |0) ranges over a complete 
orthonormal basis A of the n + na-qubit computational register. As noted in Section 5, Hb\s is 
block diagonal in this basis with 2"'"'""'" blocks because Hb only connects states associated with the 
same |0) G A. Furthermore, each block of Hb\s in this unnormalized basis is equal to |L where L 
is the Laplacian of the graph in Figure 5.2. We can write each block of Hb\s in orthonormal 
basis as 

\dld, 



where 



D = diag 



1111111 11 



7' ^/4' V4' V43' ^/4' V4' V43' ■ ■ ■ ' ^4' ^4' ^43 



takes care of the normalizations (as per (5.22)). Thus, ^{Hb\s) is equal to 7 [^DLD^, which we 
now bound. First, note that 



7(L) = n 



which follows from known bounds on the eigenvalue gap of a Laplacian matrix (for example from 
Theorem 4.2 of reference [19]). To finish the proof we relate ^{L) to 7 (jL'LD) . Let \wq) be the 
normalized all ones vector, the unique zero energy vector for L. Then, up to normalization, ;^|tyo) 
is the unique zero energy state for ^DLD, and for some normalized vector satisfying 

(wo I 0, (C.28) 
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(IdLd) = \{v\DLD\ 



4 {q\q) 

where |g) = D\v) and we used the fact that the smallest eigenvalue of is Write 

\q) = a\wo) + f3\w±), 
where {'w±\wq) = and (wqIwo) = {w±\w±) = 1 and note that 

{wo\D-'^\v) = {wo\D''^\q) = a{wo\D-'^\wo) + (3{wo\D-^\w±) = 
by (C.28) and hence 

\{wo\D-^\wjl)\ 43 



< 



{wo\D-^\wo) - 4' 

where we used the facts that the smallest eigenvalue of D^^ is 4 and its largest eigenvalue is 43. 
Noting that 

{q\L\q) /32 



{q\q) 



{w±\L\w±) 



= n 

we get 



( 



1 

Vm2 



by plugging into (C.29). Now applying Corollary 2, using Lemmas 7 and 9 and using the bound 
\\Hb\\ = 0{M), we finally get the desired result. □ 



